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PREFACE 


This book is written to serve as a textbook for a one-semester 
course in the theory of numbers. Much care has been taken to 
make it relatively easy reading for the student, and at the same 
time to see that the reasoning 1s complete and accurate. A large 
number of exercises is provided. The arrangement of text and 
exercises 1s made to meet the requirements of classroom use. In 
the process of preparation the book has been used in classes at 
City College, New York, by both Professor Bennington P. Gill 
and the author. During its writing and its experimental use the 
author has had the privilege of frequent conferences with Pro- 
fessor Gill, who has given generously of his time in criticism and 
in editorial assistance. Much credit is due to him for the results 
attained. 

The choice of subject matter for the course is largely determined 
by general usage and probably does not vary much among the 
colleges of the country. There may be some lack of agreement 
with the emphasis placed upon certain topics. For example, 
some would probably give less time to continued fractions than 
is called for in Chapter II, or possibly some would omit the 
section on the Jacobi symbol in Chapter IV. We feel that the 
length of Chapter II is justified by the fact that in this discussion 
of the simple continued fraction we have presented a well-rounded 
and interesting unit of the subject. Moreover, this discussion 
serves well to give the student valuable experience in algebraic 
reasoning without at the same time introducing too many new 
concepts. The consideration of the equation x2 — Dy2=WN 
could have been postponed to Chapter V; but, since this treat- 
ment of it is so intimately related to the continued fraction 
theory, the presentation along with that theory seems more effec- 
tive. As to the Jacobi symbol, it is an important tool for later 
use in number theory and is very naturally introduced along 
with the discussion of the Legendre symbol in Chapter IV. 

Power residues and indices are used rather extensively in the 
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latter part of the chapter on congruences. They make possible 
relatively simple and interesting solutions of certain problems 
and form a natural introduction to the chapter on quadratic 
residues. 

The text contains sufficient material so that omissions may be 
made from one or more of Chapters II, IV, and V, and still 
there will remain a full semester’s course for many undergraduate 
classes. 


H. N. WricHT 
September 6, 1989 
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FIRST COURSE IN THEORY OF NUMBERS 


CHAPTER I 
DIVISIBILITY 


1. Definitions. The numbers which will be of principal inter- 
est in this study are the positive integers. However, unless other- 
wise limited, the term integer is used to include negative integers 
and zero. Letters throughout our work will be understood to denote 
antegers except when otherwise defined. 

We assume without discussion that the operations addition, 
subtraction, and multiplication when applied to integers yield 
integers. Also it is assumed that these operations obey the usual 
laws of commutation, association, and distribution. 

When a-b = c, where, in accordance with our notational agree- 
ment above, a, 6, and c are integers, we say that a and b are divisors 
or factors of c, and that c 1s divisible by, or is a multiple of, a and 
also of b. That is, in 5-13 = 65, 5 and 13 are divisors of 65, and 
65 is divisible by, or is a multiple of, 5and also of 138. In particular, 
by writing a-1 = a, attention is called to the obvious fact that 
each integer is divisible by itself and unity. Such divisibility by 
unity will not usually require explicit mention. 

If an integer p > 1 has no divisors other than +p and +1 
it is called a prime; if it has other divisors it is said to be composite. 
The primes <20 are 2, 3, 5, 7, 11, 138, 17, 19. Integers are called 
even or odd according as they are or are not divisible by 2; from 
which it follows that all primes other than 2 are odd. Then an 
even integer may always be represented by the form 2n and an odd 
integer by either of the forms 2n + 1 or 2n — 1. Two integers 
which are both even or both odd are said to have the same parity; if 
one is even and the other odd they have different parity. 

If m = a-b and n = a-c, a is said to be a common divisor of 
mand n. Then, since 


m+n=ab+tac=a(b+c) 
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it follows that the sum or the difference of two integers is divisible 
by any common divisor of them. In particular we note that the 
sum or the difference of two integers having the same parity is 
even; for 

2m + 2n = 2(m +n) = 2k 


and (2m +1)+ (2n4+ 1) = 2(m+n+1) or 2(m— n) 
Likewise, since (2m+ 1) +2n = 2(min) +1 


the sum or difference of two integers having unlike parity is odd. 
2. Greatest common divisor. The largest positive integer 
which divides the absolute values of each of two integers is called 
their greatest common divisor, abbreviated g.c.d. Given two positive 
integers m and n, their g.c.d. may be found by the following 
method, known as the Euclidean algorithm. Assume m > n, and 
divide m by n, getting the quotient q,, and the remainder 71. Here 
qi = E (is being the symbolic way of writing that qi is the 
n 
greatest integer in ), and we have the inequality 0 Sr <n. 


Then similarly divide n by 11, getting gz = . and re, where 
1 

0 <re <7. The divisions may be continued thus 

m=na+ ri 

n = 7rig2 + re 

Tr, = req3 + 13 

Tear = TeQigi + s41 

until the remainder, which is positive and decreasing with each 
step, becomes zero, which it must do in a finite number of steps, 
for there is only a finite number of non-negative integers less than 
a given integer. If this number of steps is k + 1, the last divi- 


sion is written 
Tk-1 = ThQk+1 


It follows that 7, is a divisor of 7,_,. Then, from the preceding 
equation %_2 = Tr-19% + 7x, it follows that 7,, being a divisor of 
each term of the right member, is a divisor of their sum r;—s. 
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Carrying the argument back step by step, 7; is seen to be a divisor 
of each r; and finally of m and of n. 

On the other hand, writing the first equation m — nq; = 7, 
any common divisor of m and n is seen to be also a divisor of 7. 
From the second equation it is seen to be a divisor of rg and from 
succeeding equations of each r;, and finally of rx. 

Then since we have seen that 7; is a common divisor of m and n, 
and, conversely, that any common divisor of m and n must also 
divide rz, it follows that r, is the greatest common divisor of 
mand n. This is written (m, n) = rz. In particular, if 7, = 1, 
m and n are said to be relatively prime, or prime to each other. 


Example. Find the g.c.d. of 7469 and 2387. We write 
7469 = 2387-3 + 308 
2387 = 308-7 + 231 
308 = 231-1+ 77 
231 = 77-3 
Therefore (7469,2387) = 77. 


EXERCISES I 


By the Euclidean algorithm find the g.c.d. of: 
1. 5320 and 4389. 2. 4147 and 10,672. 3. 8749 and 11,143. 
4. Show that, if n is odd, n(n? — 1) is divisible by 24. 
5. Find the highest power of 3 which is contained in 1100 (factorial 100; 
that is, 1-2-3 --- - 99-100; 100! is also used with the same meaning). 
6. Show that the square of an odd number is of the form 8n + 1. 
7. Show that x? + y” = 2” cannot be true in integers when both z and y 
are odd. 
8. Show that n° — n is divisible by 30. 
9. Show that, if 2" — 1 is a prime, n is a prime. Suggestion: Use the 
algebraic factors of a” — 1. 
10. Show that, if 2" + 1 is a prime, n is a power of 2. 
11. Show that, if p is a prime > 3, p = 6n + 1. 
12. For what set of least positive values of 6 will the forms 4n + b include 
all odd primes? For what set of numerically least values of b? The same 
questions for the forms 12n + b to include all primes > 3? 


3. Properties of the g.c.d. THrorem 1. Jf (m, n) = d, where 
m = m’d and n = nd, then (m’, n’) = 1. 

For, if m’ and n’ had a common divisor d’ > 1, dd’ would divide 
both m and n, and d could not be their greatest common divisor. 
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THEOREM 2. The greatest common divisor of two positive 
integers may be expressed as a linear homogeneous function of them 
unth integral coefficients. 


To prove this we note that r;, the g.c.d. of m and n as found 
above, is the last remainder >0 and occurs in the equation 


Tk-2 = Th~19k + Tk 
from which Tk = Thk-2 — Tk—-1k 
Similarly, from the previous equation, 
"e-1 = ThK~3 — TkK-29k-1 
Substituting this value of r,_1 in the expression for rz, we get 
Te = Th-2(1 + Qe—19k) — Th-39K 


a linear homogeneous function of r,_2 and 7,3 with integral coeffi- 
cients. Continuing with similar substitutions of the values of 
Tk—2, Tk—3, ‘°° » 71 nN turn, 7; 1s finally expressed as a function of 
mandn. Since the expression for each r; as substituted is homo- 
geneous and linear in 7;_,; and r;_2 and has integral coefficients, 
these characteristics of the expression for 7, are preserved, and 


re = mA +nB 


where A and B are integers (not necessarily positive). 
From the illustrative example of the g.c.d. used above 


77 = 308 — 231 
= 308-8 — 2387 
= 7469-8 — 2387-25 
Corouuary. Jf (m,n) = 1, integers A and B can be found such 
that mA + nB = 1. 


This follows as a special case of the theorem when the g.c.d. of 
m and nis unity. 


THeoreM 3. Jf (m,n) = 1, any common divisor of m and nk 
1s a divisor of k. 
For, since (m, n) = 1, 
mA +nB=1 


and mkA + nkB =k 
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Then any divisor of m and nk divides the left member of the 
equation and hence divides k. 


CoroLuaRyY 1. Jf (m,n) = land (m,k) = 1, then (m, nk) = 1. 
For, if (m, nk) = d > 1, by the theorem d would divide both 
m and k, contrary to (m, k) = 1. 


Corouuary 2. If each of any number of integers is prime to m, 
their product is prime to m. 


4. Solution of the Diophantine * equation ax + by = c. 
Theorem 2 is useful in finding integral solutions zx, y of the inde- 
terminate equation 


(1) ax + by =c 


in which a, 6, and ¢ are given integers. We first note that, if 
(a, 6) = d > 1, dis a divisor of az + by and therefore must divide 
cif x and y are to be integers. Then if d does not divide c the 
solution of (1) in integers is impossible. 

Assuming that d is a divisor of c, we divide (1) through by d 
and get 


(2) 


in which ; : : , and ; are integers, and, by Theorem 1, (: ; *) =], 
Clearly, integral values of z and y which satisfy either (1) or (2) 
will also satisfy the other. Hence the solution of equation (1) is 
reduced to the solving of such an equation in which it is assumed 
that (a, 6) = 1. 

Assuming, then, (a, 6) = 1, by Theorem 2 integers zo and yo 
can be found such that azp + byp = 1. It follows that x; = zoe, 
Yi = Yoc are integers forming a solution of (1) and az, + by; = ¢. 
Now let z, y be any solution of (1) so that ax + by = c. By sub- 
traction a(z — 21) + bly — yi) = Oora(e — 2) =— bly — y;). 
Then, since (a, 6) = 1, by Theurem 3, a divides y — y,;, and we 


* The solving of indeterminate equations and systems of equations in 
integers and rational numbers forms a considerable part of a work on algebra 
published by Diophantus probably about the middle of the third century a.p. 
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can write y — y, = at, where ¢ is an integer. Then a(x — 2) 
= —bat or x —2z, = — bt, and 
x= 27, — bt 


(3) 
yi + at 


y 


Thus any solution of (1) may be expressed by (3) in terms of a 
given solution and an integer ¢. Conversely it is seen by substi- 
tuting these values of x and y in (1) that they satisfy for arbitrary 
values of ¢. Therefore (3) gives all possible solutions of (1) in 
terms of an initial solution, 21, yj. 


EXERCISES II 


1. Express unity as a linear function of 93 and 41. 

2. Express 9 as a linear function of 243 and 171. 

Find the general solution, and determine the number of particular solutions 
having both x and y positive: 

3. 652 + 77y = 200. 5. 502 — 63y = 75. 


4, 332 + 19y = 250. 6. 78x — 117y = 97. 
7. Six + 85y = 1087. 


5. Unique factorization theorem. Following Corollary 2 of 
Theorem 3 we state: 


THEOREM 4. If a product of several integers is divisible by a 
prime p, at least one of the integers 1s divisible by p. 

For if no one of the integers were divisible by p their product 
would be prime to p. 

From the foregoing properties based ultimately on the Euclidean 
algorithm, we will now prove the following fundamental theorem, 
known as the unique factorization theorem, which has been the 
principal objective of our argument thus far. 


THEOREM 5. Any composite positive integer N can be expressed 
as the product of primes in one and but one way, 1f we do not dis- 
tinguish between two arrangements of the same primes. 

For let p; be a prime dividing N, and N = p,N,. If N, is 
composite it is divisible by a prime pe, and N = p;-po-Nog. This 
process may be continued until N;_, is itself a prime px, and 
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N = D1°Po° + * pe, in which the p; may not be distinct. An abbrevi- 
k 
ated writing of such a product is N = II p;. 


t=1 


Now suppose a second factorization of N into primes were 


effected and ; 


n 
N=Ip; = qj 


i=1 8 80j=1 
n 

Each p; divides II q;, and by Theorem 4 it divides one of the q; and 
1 

is therefore identical with it. Let it be that p; = qi, then 


k n 
Il p; = Il q; 
2 2 


By extending the argument each 7p; is seen to be identical with 
some q;, k = n, and the theorem follows. 

There is no direct and practicable method of factoring all 
integers, and at the same time the problem is of fundamental 
importance in the study of numbers. Several special methods 
exist by which integers of certain forms may be factored, but all 
are limited in application. Some of these will receive attention in 
the progress of our study. An excellent discussion of the problem 
of finding the factors of an integer is given in the introduction to 
Lehmer’s Factor Tables. These tables give the factors of all 
integers less than 10,000,000. 

The primes which divide a number N may be found by the 
direct method of trial division if N is not too large for the method 
to be practicable. Such trials may be limited to primes less than 
orequalto~/N. For, obviously, if N is the product of two factors, 
one of them is less than or equal to~/N. Of course, if N contains 
either of the primes 2 or 5, that fact 1s shown at once by the nature 
of the end digit of NV. 

For example, we express 6534 in terms of its prime factors. 
Obviously, 2 is a factor, and 6534 = 2-3267. It is seen that the 
larger factor contains neither 2 nor 5. By successive trials we find 
6534 = 2-3°-11°. 

6. Sum and number of divisors. From the expression of 6534 
in terms of its prime factors, all its factors may be listed. They 
are unity and all possible combinations of one or more of the 
primes 2, 3, and 11, each with an exponent less than or equal to 
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its exponent in 6534. Clearly these factors are the terms of the 
product 


(1+2)(1+3+3?+3%)(1+11+4 11’) 
= 143437433 +1143-11+3?-11433-114112+3-11? 
+37. 117-+3%.1174+242-342-37+2-3342-1142-3-11 
4+2-3?-114+2-33.1142-11?+2-3-117+2-3?-11? 
+2-33-11? 


This expression, therefore, represents the sum of the divisors of 
6534. From the first form in which it is written, 1t appears that 
the number of the divisors of 6534 is 2-4-3 = 24. 

These expressions are readily generalized to secure formulas 
for the sum of the divisors of a number JN, and for the number of 
its divisors, assuming that its prime factors are known. Let 
N = p{'-p9?-p3°---py*, where the p; are distinct primes. The 
divisors of N are unity and all the possible combinations of from 1 
to k of the p;, each having an exponent of any value from 1 to a; 
inclusive. These divisors are seen to be the terms obtained by 
multiplying together the quantities in parentheses in 


o(N) = (1 t+tprtpit-:: +r + pet pet +++ + pe) 
sesh pet py bos + pe") 
bt Peed. pe 
Pi— il Po — 1 Pr —1 


and o(N) is therefore the sum of the divisors. From the first of 
these forms the number of divisors of N is seen to be 


v(N) = (1 + a@y)(1 + ag)--+ - (1 + ag) 
To illustrate, put N = 5,217,520 = 2*-5-77-11°. 
o(N) = (142427423 + 2%) (14+5)(1+7+7°)(1+114+11°+11°) 


Re eee ee ea 15,521,328 


V(N) = (1+ 4) + 1) + 2)(1 + 3) = 120 
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7. Least common multiple. The least common multiple of two 
or more integers m ,, mo, ---, m, is the smallest positive integer 
divisible by each of them. Consider the m; resolved into their 
prime factors. Let a; be the least and 8; the greatest number of 
times the prime p; occurs in any one m;._ It follows from the defi- 
nition that the l.cm. = II p?*. Also the g.c.d. = I p@*. 


To illustrate, if m, = 2-3°-7 
ma = 2-32-11 
m3 = 27-3-7 
then the lem. = 2*-3°-7-11 
and the g.c.d. = 2-3 


8. Infinitude of primes. The number of primes is infinite. 
Euclid’s argument establishing this proposition follows. Assume 
that there is a largest prime p. Form the product P of all 
primes S p and add 1. 


P+4+1=2-3-5-7--» -p+1>p 


If the number P + 1 is a prime then p is not the greatest prime. 
If P + 1 is composite it must be the product of primes each of 
which is greater than p. For, when P + 1 is divided by any 
prime S p, there is a remainder of +1. Thus in any case it is 
shown that at least one prime exists which is greater than p. 
Hence there is no greatest prime. 


EXERCISES II 


1. Find the l.c.m. and the g.c.d. of 4235, 2156, and 2457. 

2. Show that the product of the g.c.d. and the ].c.m. of two integers is the 
product of the integers. 

3. Find o(144) and »(144) by means of the formulas, and check by listing 
the divisors. 

4. By means of the formulas find the sum of the divisors and the number 
of the divisors of the integers of Exercise 1. 

§. Prove that, if (m,n) = 1, then o(m-n) = o(m) a(n) and v(m-n) = 
v(m) v(n). 

6. Given m = 2?71!(2? — 1) and 2? — 1 isa prime; show that o(m) = 2m. 

7. Prove that there are infinitely many primes of the form 6n — 1. 
Suggestion: Use the number P — 1, where P is the product of all primes 
<6n — 1. 

8. Prove that there are infinitely many primes of the form 4n — 1. 
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9. Perfectnumbers. A class of numbers which received special 
attention from the Greeks, and from many students of mathematics 
since, is made up of those positive integers m such that o(m) = 2m. 
This is equivalent to saying that a number belongs to this class 
when it equals the sum of all its divisors other than itself. Appar- 
ently a little of the mystical regard which the Greeks had for 
the striking properties ‘of numbers is reflected in their calling this 
kind of number a perfect number. Six is such a number, since 
1+2+3 =6, or o(6) = 12. The two next smallest perfect 
numbers are 28 and 496. 

In solving Exercise 6 above, the student proved that 
m = 2"—1(2" — 1), where 2” — 1 is a prime, is always a perfect 
number. Conversely, we show as follows * that every even perfect 
number is of the form 22-1(2" — 1), where 2° — lisa prime. For 
let m = 2"—'g, where g is odd and r > 1, be any even perfect 
number. Then 


a(m) = o(27) + o(g) = (2" — 1) + o(g) = 2m = 2"q 


In the equation 
(2" — 1) - o(g) = 2’¢ 


we put o(q) = q+ d, thereby defining d, getting 
(2" — 1)(q@ +d) = 2%q 
Solving this for qg, we have 
= d(2" — 1) 


which shows d to be a divisor of g and <q. But by assumption 
o(q) =q+d. Hence it is necessary that d = 1. For if d > 1, 
then o(q) 2¢+d+1. Therefore o(q) = ¢+ 1, which is true 
only when gis a prime. Hence 


gq = d(2”7— 1) = 27-1 
which is a prime. 

We thus have some knowledge of the form of all even perfect 
numbers. This becomes all the more important in the light of the 
fact that no odd perfect numbers are known. No proof exists, 
however, that an odd number cannot be perfect. 


* This proof is due to L. E. Dickson. See Amer. Math. Monthly, Vol. 18 
(1911), p. 109. 
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10. Euler $-function. By ¢(m), where m is a positive integer, 
is meant the number of positive integers not greater than m and 
prime to it.* 

Thus ¢(1) = 1, 6(2) = 1, (8) = 2, (4) = 2. Clearly, if pis a 
prime, o(p) = Ps 1. 

We proceed to derive a formula for ¢(m), where m = II pf". 


Denote the set of integers 1, 2, 3, ---, m by M. ie of these 


Pi 
are multiples of p,; and hence not prime to m. Then m — bl 
Pi 
1 
= m(1 — *) of the integers M are prime to p,;. Denote this set 
1 


by ed 1- 

Now P, includes those multiples of pg which are not also multi- 
ples of pj. We determine their number and thus find the number 
of integers prime to both p; and pa. All the multiples of pz in M 


m . 
are Po, 2po, 3p2, °°*, TP2, °°°, 7g Pe Those which are in P, 
2 


are the ones in which r is not divisible by p;. Reasoning as above, 


1 ; ee 
zh (1 — +) of the integers 1, 2, 3, ---, ih are not divisible by 
P2 P1 P2 
1 
Pi, which means that ™(4 — +) integers of P, are multi- 
2 1 


ples of pe. Hence, the number of integers of M prime to both 
P1 and P2 is 


alt -3)-30-5)-a0-Z)0-5) 


We now complete the argument by induction.t Assume that 
after all integers which are multiples of one or more of the primes 


Pi, Po, ***, Py are removed from the set M, there are left 
1 1 1 

m(1 — +) ¢ — +) ee (1 — +) integers denoted by Pj. 
P1 P2 Pi 


* Other names for ¢(m) are the totient of m and the indicator of m. 

+ The reader will recall the basic principle of proof by mathematical induc- 
tion: If a statement involving an integer n is known to be true for one value 
of n, say n = nm, and if, assuming it to be true for n in general, we can prove 
it to be true for n + 1, then it follows that the statement is true forn = no + I, 
m + 2, etc., and consequently for all values of n 2 no. 
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All multiples of p;4; in M are 


Pi+1) 27341) 78%) TPiti, °°) —— Pi41 
Pi+1 
Those which are in P; are the ones in which 7 is not divisible by 
any of the primes pi, pe, --:, v; The number of such is the 


number of integers in the set 1, 2, 3, ---, 7, -->, prime to the 
Pi+1 
product p1:~p2:-: -pi, which number, by the above assumption, is 


Resa es 


Subtracting this from the number of integers in the set P; and 
factoring the result, we get 


m(r-s)G-a) 0-5) 0-5) 


as the number of integers of M which are prime to the product 
Pi'Po°** *Pi41- This result is in the same form as that assumed 
for the number of integers in P;. Then, since the form was proved 
to be correct for 7 = 1 andi = 2, it holds for all values of 7, and 
therefore: 
k 1 k 
THEOREM 6. ¢(m) = m n( — +) = IIp;*"'(pi — 1), 
1 


1=1 


K 
where m = II pj". 
i=l 
The latter form given for ¢(m) is useful for computation. In 


1 
particular we note that ¢(p*) = (1 — *) = p*—'(p — 1), where 
p is a prime. 


THEOREM 7. When (m,n) = 1, d(m-n) = d(m)d(n). 
This follows readily from the last theorem. If 


k 
m= II p;* and n= II qj, 
1 1 


$(m)¢o(n) 


H 
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EXERCISES IV 


1. Find the values of $(144) and ¢(360). 
2. Find the value of ¢(6615). 


3. Show that a ¢(p*) = p%, where p is a prime. 
4=0 
4, Show that the sum of the totients of the divisors of any integer equals 
the integer. 
5. Show that, if n > 1, the sum of the positive integers less than n and 


: _ nr 
prime to n is 3 o(n). 


11. The equation $(x) =n. Given n, there is no known 
formula by which x can be determined so as to satisfy ¢ (1) = n. 
But the following process enables us to compute z in any given 
case, and is quite practicable if n is sufficiently small. 


. pi— il 
Let x = I pi"; then ¢(z) = mp Pi =n. Put p;—1l=d,;; 
a ays d; 
then d; is a divisor of n and n = II pjt— = xII—. Therefore 
Di Pi 
= II 
ae . ‘ 
Il d; Pi 


Here II d; may be the product of any of the divisors d; of n such that 
each d; + lisa prime p;; and subject to the further condition that 


is an integer containing no prime factor not included in II p,, 


for II p; is by definition the product of all the distinct prime factors 
of zx. 

Illustrative example. Find the values of x for which ¢(xz) = 12. 
The values of d; such that d; + 1 = p; are 1, 2, 4, 6, 12. In con- 
sidering all possible II d; we may at once eliminate those in which 


12 
7 is not an integer, such, for example, as 2-4 and 4-6, since —— 
II d; 2:4 


pee t int 
an. 1.6 not integers. 


Also the further condition that = 


Shall have no prime factor 


II d; 
not also a factor of II (d; + 1) = II p; causes the elimination of 
12 
such II d; as, for instance, 2or1-4. For, when II d; = 2, aa = 
i 


= 2-3, and II p; = 3, which does not have 2 as a divisor; and when 


14 DIVISIBILITY 


n 12 : ; ; 
Id” ite 3, while II p; = 2-5, of which 3 is not a 


id; = 1-4, 
divisor. 

The values of II d; which satisfy all conditions and the resulting 
solutions are: 


IId;: 12 1-2 1-6 1-12 2-6 1-2-6 


1 6 2 1 1 1 
Il d; 
Ip: 13 2°3 2-7 213 3-7 2-3-7 
z: 13 36 28 2622 42 
EXERCISES V 


1. Find the values of x for which ¢(r) = 24. 

2. Find the values of x for which ¢(x) = 72. 

3. Show that ¢(z) = 2p, where p is a prime and 2p + 1 is composite, 
has no solution. 

4. Find a set of ten consecutive integers all of which are composite. 

5. Find all possible numbers m = 2”-3-p (p an odd prime) such that 
3m = a(m). 

6. Find the smallest number having sixteen divisors. 

7. If (a, b) = 1, show that a + b and a? — ab + b* can have no common 
factor unless a + b is a multiple of 3. 

aP + bP 


a 


8. If (a, b) = 1, and p is an odd prime, show that and a+b 


have no common factor unless a + b is a multiple of p. 

9. If f(x) is a polynomial, it cannot represent only primes for integral 
values of x. Suggestion: Let u = f(m) and v = f(m + ku), where k is any 
integer. Prove that u is a factor of ». 

10. Show that 10” + 3-4"*? + 5 is divisible by 9. Suggestion: Denote 
the function by f(n), and show that f(n + 1) — f(n) is divisible by 9. Then 
use induction. 

11. Show that 77” + 16n — 1 is divisible by 64. 

12. Show that, if p is a prime, x? — z is divisible by p. 


CHAPTER II 
SIMPLE CONTINUED FRACTIONS 


12. Expansion of rational numbers. An expression of the form 


by 

by 
ae 
ag4+::-> 


is called a continued fraction. In general, the a; and b; may be 
unrestricted in character, and the number of terms may be finite 
or infinite. 

A simple continued fraction, s.c.f., is one in which each b; = 1 
and the a; are positive integers, except that a; may be positive, 
negative, or zero. Our discussion will be limited to simple con- 
tinued fractions. 

1 so. 


A more convenient writing of them is a; + — eg ees 
or, yet more simply, (a1, @2, a3, 4 °°°). 

The properties of simple continued fractions will have several 
interesting applications in our study of the integers. 

The following illustrates the expansion of rational numbers into 


simple continued fractions: 


67 19 1 1 1 1 1 
— = 2 mn? == 2 =2+- - - = 
24 " v eee: 7434144 
19 19 
Or, in the case of a negative number, 
67 5 1 1 1 
caviar sl a ee Ve 


16 SIMPLE CONTINUED FRACTIONS 


These illustrations generalize readily to yield the proof of: 


THEOREM 1. Any rational number may be expanded into a 
simple continued fraction with a finite number of terms, and, with the 
trivial exceptions noted below, the expansion 1s unique. 


Let be any rational number. Then by division gee a, + = : 
q 


where a, is the greatest integer S ; andO Srn<q. If Z is nega- 
q 


tive, a, will be negative and is so chosen that 7; will not be negative. 
Likewise te dg + = ; OF a3 + = , °*+, In which each a; is the 
Ty Ty 12 TQ 
greatest integer in the corresponding fraction and 7;4; < 7;. Since 
the r; are non-negative integers that decrease with each step, after 
a finite number n of steps rn, must be zero and the process ends. 
(For there are only a finite number of non-negative integers less 
than a given integer.) Combining the results of the n steps, 
p 1 1 


1 
“=a, +— +++ —- a; 1s called the 7th partial quotient 
q | Qgtazt +4, eee j 


Te 
and a; + — 


the 2th complete quotient. 
i-1 
That this expansion is unique follows from the manner in 
which each a; is chosen. This should be accompanied, however, 
by the remark that the number of terms in a finite simple continued 


fraction can always be changed by 1. For if a,> 1 it can be 


1 
replaced by (a, — 1) + 1 That is, if a, = 3, it can be replaced by 
1 1 
2+ a And if a, = 1 we have ayj_, + 1 which can be replaced 


1 
by adn_1 + 1,a83 + 1 can be replaced by 4. Hence, in the expan- 


sion of a rational number, the number of partial quotients may be 
assumed to be either even or odd, unless the choice is restricted 
by some other imposed condition. Such a condition is met later 
in the exercises on symmetric continued fractions. 


The algonthm for expanding . into a simple continued fraction 


is identical with the Euclidean algorithm for finding the g.c.d. of 
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pandgq. This algorithm gives the equations 
p=aqtrn 


qd = or, + 12 


which may be written 


r 
Be cae 
q q 
ry 1 


and when these are combined the continued fraction is secured. 
13. Convergents. That part of the simple continued fraction 
up to and including a, is called the kth convergent, and is denoted 


67 1 1 Ii 
f — =2+—- -=—.- 
by C;. In the expansion o 54! C3 + ‘eae 
In general, Cy = a; = 7. We shall put p; = a; and q, = 1, 
1 1 
so that C, mee’ Cy =a, + — ac and we put 
q1 ag ag 

1 1 
Po = aed, + 1, G2 = ag. Then C2 = —. C3=a+¢—- , — 
q2 dz + ag 


a3 (aoa 1 a : 
NO SN Gee, its ps sas oe 
a3a2 + 1 q3 
Azp2 + pi, and q3 = G3dz2 + 1 = agqe + 4. 
The algorithm here suggested for computing any p; and q; from 


the preceding values in such a way that C; a may be 
i 
established by induction. 
For all 72 3, we define p; = aypi_1 + pi-g and q; = a,Q:_1 


, aypi- eee 
+ g;—2,and assume C; = Pi _ WPi-1 T Pi-2 


Then C,.., may, from 
Qi AiQi-1 + Qi-e eit 
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its very definition, be had by putting a; + for a; in the ex- 


a+1 
pression for C’;,, getting 


1 
(«; + A :) Pi-1 + Di-2 
Cia = te en 
(«, + 


_ UW41Di + pi-1 _ Pitt 
Qi419i + Qi-1 M41 


= Ai+1(Qpi_y + Pi_o) + Di-1 
Ai41(GiQi-1 + Qi-e) + Gi-1 


1 
Qi~1 + Qi-2 


t+1 


which is the result to be proved with 7 replaced by 1+ 1. This 
proves the algorithm p; = a;pi-1 + Di-2, Ge = GiQi_-1 + G-2, 


C= Ps to be valid for the computation of all C; for 72 3, since 


4 
we have seen that it is valid for z = 3. To extend it to include 


1 = 1 andi = 2 we define p_; = 0, po = 1, g_1 = 1, and q@ = 0; 
for these values enable us to write 


Pi = Po + P-1 Qi = 490 + 9-1 
Pe = G2Pi + Po d2 = Gem + Qo 
thus making the algorithm valid for all values of 7. We shall not 


call =" and © convergents. 
q—1 Go 

It is important to note that this method of computing the con- 
vergents of a simple continued fraction by means of recurrence 
relations is independent of whether the fraction has a finite or an 
infinite number of terms. 

A convenient arrangement of the computation of the conver- 
gents is shown in the following. Given the continued fraction 
(2, 1,3, 1,4, 2, ---); arrange the a:, p_1, Po, 1, and go as shown, 
and the computation proceeds by the above formulas. 


e —l 0 1 2 8 4 7) Gees 
a; 2 1 3 1 4 2+ +s 
rp «320 1 2 8 UW 4 67 148... 
qa 1 0 1 1 4 +«+5 2 53--- 
‘ P5 67 
For example, this shows that C; = — = — = (2,1, 3,1, 4). 
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Since - is a rational function of the preceding p;, q:, and dp, 
n 


and therefore a rational function of the a,, all of which are integers, 
we can state: 


THEOREM 2. Any simple continued fraction with a finite number 
of terms represents a rational number. 


EXERCISES I 
Expand into simple continued fractions: 
1. 442. 3. 348. 
2. 485. 4. 48 
Find the numbers represented by: 
5. (3, 1, 1, 4, 1, 3). 7. (2, 1, 1, 3, 1, 1, 2) 
6. (0, 2, 4, 1, 5). 8. (—5, 1, 3, 2, 4): 
9. Prove that BE ten (dn, Gn—1, ***, Ag, @1). 
Pn—1 
10. Prove that oe (dn, On—1, ***, 43, Ae). 
Qn—1 


11. Compute the successive convergents to 3.14159. 
12. Show that the kth convergent in the expansion of is the reciprocal 


of the (k — 1)th convergent in the expansion of x where x > 1 and is not 
necessarily an integer. 

14. Differences of convergents. Attentive inspection of some 
of the preceding exercises leads to two observations: first, that 
the convergents always seem to be in lowest terms; and second, 
that the difference of two consecutive convergents is a fraction 
with numerator unity. We proceed to prove these results. 


THEOREM 3. PpGn—1 — Pao—1dn = (—1)", where n= 0. 
To prove this we use the values of p, and g, obtained above 
and write 
PrQn—1 — Pn—19n = (GnPn—1 + Pn—2)Qn—1 — Pn—1(GnQn—1 + Qn—2) 
= — (Pn—19n—2 — Pn—29n—1) 


This expression in the parentheses is the same as the original with 
n—1 put for n. Then by repeating this reduction until it has 
been performed n times we get 

PrQn—1 — Pn—19n = (—1)"(pog—1 — P-190) = (—1)” 
and the theorem is proved. 
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Coro.LuaRyY 1. Lach convergent : of a simple continued frac- 


tion 1s in its lowest terms. 
This follows by observing that p, and gq, can have no common 
factor which is not a divisor of (—1)”. 


However, the fraction obtained by expanding a number z is 
q 


the same whether or not ; is first reduced to its lowest terms. 


CoROLLARY 2. a 3 Set , where n = 2. 
Qn Qn~-1 QnQn—1 
This is obtained by dividing through the equation of the 
theorem by gn@n—1. 
This result is significant in that it puts in very useful form the 
value of the difference between two successive convergents. 
There is also a useful formula for the difference of two conver- 


gents whose indices differ by 2. 


THEOREM 4. — — —— = —_ nn 
Qn Qn—2 QnGn—2 
For by substituting for p, and qn 
PnQn—2 — Pn—29n = (GnPn—1 =“ Pn—2)In—2 oe Pn—2(AnGn—1 + Qn—2) 
se On(Pn—19n—2 — Pn—29n—1) = An(—1)"* 
Then, by dividing through the equation 
PnQn—2 — Pn—29n = an(— 1) aa by QnQn—2 


Pn Pn—2 (— |) ars 
we get Sree as a ee  e 
Qn Qn—2 QnQn—2 


15. Another solution of ax + by = c. This equation was dis- 
cussed and solved in Chapter I by means of the algorithm used in 
finding the g.c.d. of two integers. It may be solved also by use 


of the equation of Theorem 3. Assume (a, 6) = 1, and expand ; 
into a simple continued fraction. Then with a = p, and b = q 
Agn—1 — bpp—1 = (—1)" 


* The equation holds also for n = 1. 
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and multiplying through by (—1)”C, 
a{(—1)"Cqn—1] + b[(—1)*t'Cp,_-4] = C 
Thus one solution of the equation is 
zy = (—1)"Cqn-1 
yr = (- 1)? Cpa 
and, as before, the general solution may be written 


x= 2, — Ot 
y=%4y + at 


in which ¢ is any integer—positive, negative, or zero. 


EXERCISES II 


1. Using a continued fraction, find the general solution in integers of 
10lz + 68y = 50. Discuss the number of solutions in which both z and y 
are positive. 

2. The same for 752 — 13ly = 62. 


A symmetric continued fraction is a finite simple continued fraction in 
which the partial quotients read the same both ways. Examples: 247 = (3, 4, 


1, 4, 3), tae = (3, 4, 1,1, 4, 3). 
3. Prove that if a rational number ui > 1, (p, g) = 1, expands into a sym- 


metric continued fraction, then g* + 1 or g* — 1 is divisible by p according 
as the number of partial quotients is even or odd. Suggestion: Use Exercise 
I, 9. 

4. Conversely, prove that according as g2 + l org? — 1 is divisible by pn, 


where pn>gqn>0, = develops into a symmetric continued fraction with an even 
dn 


or an odd number of partial quotients. Suggestion: Put q2 + (—1)" = Pn, 
and recall that pr—ign + (—1)” = pngn—i1. By subtraction (qn — pna—1)¢n = 
Pr(r — gn—1). Note that g, divides the right member and p, divides the 
left member. 

5. Write the fraction (38, 1, 1, 2, 2, 1, 1, 2, 1) in symmetric form, and 
verify the proposition in Exercise 3. 

6. Verify the proposition in Exercise 4 for three of the divisors of 13? + 1 
=170. 

7. Verify the proposition in Exercise 4 for six of the divisors of 13% — 1 
= 168. 


16. Expansion of irrational numbers. THEOREM 5. The odd 
convergents of a simple continued fraction form an increasing sequence 
and the even convergents form a decreasing sequence, and every odd 
convergent zs less than any even convergent. 
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From Corollary 2 of Theorem 3, 


—1)” 
n¥n—l 
and from Theorem 4 
(—1)"—1a, 
C, — Cr-zg = ——— for n2 3 
QnQn—2 


From a comparison of these expressions it appears that C, — Cn_, 
and C, — Cn—2 have opposite signs and hence C,, lies between 
C,—; and C,_». That is, each convergent of a simple continued 
fraction lies between the two preceding convergents. 

From (1), Cy < Cy. Then it follows that C, < C3 < Co, 
C3 < C4 < Co, C3 < Cs < C4, Cs < Ce < C4, mele etc. These 
inequalities may be combined; thus Cy < C3 < C5 < --- 
<Ce < Cy <C>. If we notice that when each C; is written in 
this sequence it must be placed between C;_; and C;_.2, the truth 
of the theorem appears. 

Theorem 5 applies whether the number of terms in the simple 
continued fraction is finite or infinite. We have already seen that 
a rational number can be expanded into a terminating simple con- 
tinued fraction, and, conversely, a terminating simple continued 
fraction represents a rational number, namely, its last convergent. 
Theorem 5 will prove immediately useful in studying the relation 
between infinite continued fractions and irrational numbers. 


THEOREM 6. Every infinite sumple continued fraction converges 
to a limit which is greater than any odd convergent and less than any 
even convergent. 

For, since the C'2,_; form an increasing sequence which is lim- 
ited to being less than any Coz, they converge to a limit as k tends 
to infinity. Similarly the decreasing sequence formed by the Coz 
is convergent. 

Now, since gn = AnQn—1 + dn—2, the g; increase without limit as z 
tends to infinity. Then 

lim lCox an Cox—1| = lim ————- = 0 
k—00 ko Q2k92k—1 
Hence both sequences converge to the same limit I, and for all 
positive values of k 
Copa <1 < Cox 
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THEOREM 7. Any irrational number x can be expanded into an 
enfinite simple continued fraction. 
Let a; be the greatest integer < 2. 


1 1 
Then x = a; + — , where 0 < ” < land z2> land irrational. 
Le 2 


1 ‘ : : 
Again, %2 = dg + a where a2 = 1 is the greatest integer in 

3 
Y_ and r3 > 1. This process may be continued indefinitely with 


In = An + , in which a, 2 1 is the greatest integer in z, and 


In+i 
In41 > 1. For the process cannot terminate because, if at any 
stage 2; = a;, x would be rational. Thus we arrive at the infinite 
simple continued fraction 


i 1 1 1 

a —_- ——- — 

' dg tas + +++ + an +++ 
Illustrative example. Expand /7. 


1 1 
oi ak lial al a ncaa ae are Ue 


V7I—2 3 


1 1 
wet wai ** if i 
3 V7+1 
2 
1 1 1 1 
= 2 =2+- - _— 
ed 1 Ti+i+) vi-3 
—/7 = 1 3 
2 
1 1 1 1 
=2+- _ _ Fae Pern RPE ae 
1+14+14+4+4 (V7 — 2) 
Notice that, following the partial quotient 4, = =~ Y/7 — 2, 
L6 
1 
which is identical with —- Hence ag = ag = ay = ::-, 


2 
a3 = a7 = ay, = -:-, ete, and+/7 = (2,1, 1,1, 4,1, 1,1, 4, ---). 
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Later we shall find such periodicity to be a characteristic of the 
expansions of all quadratic surds. 


THEOREM 8. Let x be expanded into (a1, a2, °+:, Qn, °**) In 
accordance with Theorem 7. Then the limit to which the fraction 
(a1, Bo, °** An, «**) converges in accordance with Theorem 6 is the 
number x. 

Weh je 1 1 

e have r=a — — 
* a2 a : + Ln 
1 1 
C a — — 
n i Pe eee ee 
1 1 1 
Chai = a1 + — oot tare 
as ag tres + dn + On4gi 
1 
Now In = An + ——, With tn4i > Any 
In4+1 
1 
Then dy <2%n < Gn + 
An+1 


From this it follows that of C, and C, +1 one will be less and the 
other greater than x. That is xz lies between any two consecutive 
convergents. Then from Theorem 5 it follows that one set of 
alternate convergents will all be less than, and the other set all 
greater than, x. Hence, since C; < x < C2, we can write 


Cop-1 << & < Cox 
Then, since Co,_; and Cp, tend to the same limit as k tends to 
infinity, this limit must be z. Therefore we may now write 
_ 1 1 1 
oe ges Seas ects ee Cente Gre 
It remains for us to prove: 


THEOREM 9. The expansion of any irrational number into an 
infinite simple continued fraction 1s unique. 


1 1 

Suppose that t= +—- — 
ee ; dz + a3 + 

1 1 

and also x=b,+-  - 
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Then a, = bj, since each is the greatest integer less than x, and 


1 1 
ae ane a ae ee 
similarly ag = be, and in the same way a3 = b3, ---, dn = bn, for 
all values of n, and the fractions are identical. 

We can now speak definitely of the value of an infinite simple 
continued fraction and know the number thus indicated is the 
number whose expansion gives the fraction. Then, since a rational 
number expands uniquely into a finite simple continued fraction, 
we state: 


THEOREM 10. The value of any infinite simple continued fraction 
as an irrational number. 


17. Approximation theorems. The convergents of the simple 
continued fraction for an irrational number xz constitute an espe- 
cially important sequence of rational numbers having 2 as limit. 
For we shall see presently that in a certain sense these convergents 
are the ‘“ best possible ’’ rational approximations to z. To this 
end we study a little more carefully how they approach their limit. 


THEOREM 11. Each convergent is nearer the value of a simple 
continued fraction than is the preceding convergent. 

By putting the complete quotient 7,4; for dn41 in 
Qn+41Pn + Pn—1 
On419n + Qn—1 


Cn+1 


we may write 
n41Pn + Pn—1 
In+19n 5 i Qn—1 
From this we get 
Pn—1 
Ln 41(LGn—Pn) = — (Qn—1 — Pn—1) = — In—1 (: == ay 


Dividing through by 22419, 


Pn Qn—1 ( on) 
LS Se [SS 
Qn In+19n Qn—1 
Therefore, since t241 > land q, > Qn—1, 
gases < |e — B=] 
Qn Qn —! 


which is the theorem. 
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Upper and lower limits for the error involved in taking C, for z 
are easily inferred from some of the above theorems. By 
Corollary 2 of Theorem 3, 


1 
ICn4a = C,| y 


QnQn+1 


Now 2 lies between C;,,; and C,, and, by Theorem 11, is nearer to 
Cn41- Therefore 


< |x — C,| < 
2nQn-+1 Qn Jn +1 


This is sometimes known as the approximation theorem. 
Illustrative erample. Find a ratio involving smaller numbers 


2785 
which can be used instead of 1232 with accuracy to three decimal 


places. 
2785 52 269 


—— = (2,3,1,5,5,1,3,2). Gy, == = — 
1232 (2, 3, 1, 5, 5, 1, 3, 2) 4 93’ 5 119 


Fnstcthn OOS we 
It is found that the error ¢ involved in using 3 satisfies the inequal. 
ities 


1 
eoaenh eens ee 0001 | 
3-93-119 ~ 6 ~o319 0.00018 < « < 0.00037 


r 
THEOREM 12. If : —x| < |C, — x|, r and s being integers, 


s>0,n>1, thens > qn. 

That is, a rational fraction nearer to a given number than one 
of the convergents in the simple continued fraction for that number 
must have a larger denominator than the convergent. 

This makes precise the sense in which the convergents are the 
best possible rational approximations to a given number. 

Since x lies between C, and C,_, and is nearer C,, and by 


iE ‘ r i 
hypothesis - is nearer z than C,, is, then - also lies between C,, and 
s s 


C,—1. Hence 
n—l Dn _ Dn—1 


Qn Qn—1 


r Pn—1 
Ss Qn—1 


1 S lrdn—1 a SPn—t| 
QnQn—1 SQn—1 


and 
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Multiplying the inequality by gngn—is, we get 


s > Qnl7Qn—1 oe SPn—1| 


Now Z = |rdn—1 — SPn—i| is an integer. z cannot be zero, for then 


r ri— e e 
ae * and the hypothesis would contradict Theorem 11. 
s Qn—1 


Therefore 22 lands > qp. 


1 n 
——e < 38 a then © is one of the con- 
Qn Qn 


vergents in the expansion of x into a snipe continued fraction. 


THEOREM 13. Jf 


Expanding Pr into a s.c.f. we have a (a1, dg, ***, Gn), in 
Qn n 


which by page 16 we make n even or odd according as Zz —2 


1 


—___—__— and we replace the 
Qn (Qn ss Qn—1) 


1 
is > or <0. From this —5 a < 


inequality of the theorem a 


Pn | 1 
Qn | ~ @n(Qn + Gn—1) 


Letting 2,41 be defined by 


atc 1 L. 1 
r=a 
ag tes ban + 2n41 
we have 
- In41Pn + Dn—1 
Ln+1 dn = dn—1 
from which 
ZQn—1 — Pn—1 
(1) ta 


Pn — LQn 


We first assume n even, which means that ae x>0. Put 


Pn 


; — x = eand by it eliminate z from (1) getting 
n 


1 — €nQn—1 
Ae eee aca 


2 
Edn 
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Now the necessary and sufficient condition that 7,41 > 1 is that 
1 


Qn(Qn + Qn—1) 
this is implied in the hypothesis. Hence z,4; > 1. This result 


1 — €QnQn-1 > «2, or €< But as seen above 


is obtained also for es x <0, by putting x — a = ¢€ and pro- 


n nr 


ceeding as before. 


1 l 
N dx into a s.cf. getting = b; +— — 
ow expand z into a s.c.f. getting x og oe meee 
where y,1; > 1. Then 
+ Yn+41 oe 
1 1 1 1 1 1 
ay + = 0150 


eee ae ee bo tities by as 


from which it follows that 
ay = bi, ag = bo, sy Aan = bn, Inti = Yn4+1 


Hence ihe is the nth convergent in the s.c.f. expansion of z. 


n 


EXERCISES III 


1, Find limits for the error involved in using 4? for 7. 

2. Expand +/19 to four terms of a simple continued fraction, and find C4. 

3. Find the limits of error involved in taking C, for 1/32 = (5, 1, 1, 1, 
10, 1, ---). 


18. Recurring simple continued fractions. We have found that 
rational numbers may be expressed as terminating simple con- 
tinued fractions and irrational numbers as non-terminating frac- 
tions. The special type of non-terminating continued fraction 
which is periodic was illustrated above in the expansion of +/7. 
It will be shown that all infinite periodic fractions represent qua- 
dratic surds. First we illustrate by finding the number 


t= (3, 1, 2, 4, I, 2,4, “<e) 


which is more conveniently written 


x = (3, 1, 2, 4) 


RECURRING SIMPLE CONTINUED FRACTIONS 29 


the line above indicating the recurring period. Let y = (1, 2, 4). 
Then 


aa 8 
c 24+44y 
13y + 3 


In this terminating fraction, y = C4 = 


Qy? — lly —3=0 


11 + 7/229 11 + 229 
and y = tn AA But y>0; therefore y = pee eee, 
18 18 
Then 
1 38 1 7+ 229 
Berea ee ee 


y y 6 


This process is readily generalized to prove: 


THEOREM 14. Every periodic simple continued fraction repre- 
sents a quadratic surd. 


To prove this let + = (aj, de, -**, Gr, a1, @2, °**, @s) represent 
any such fraction, and let 


y = (where A is the 7th convergent of y and p;, q; are >0) 


+ : : : (a; > 0) 
= a = a a 
: ag es + As + y : 
from which 
+ Ds 
_ ee (Ps—1, Ps» Qs—1, Qs. are all > 0) 

QsY + ds—1 

and gy” + Gs—1 — Ds)¥ — De—i = O 


This quadratic equation has one positive and one negative root, 
since its first and last terms have opposite signs. The positive 


root is in fact 
ae Ps — Ys—1 = V (Qs—1 aaa Ds)” = 4Ds—19s 


y 20s 


which is irrational, since y is the value of a non-terminating 
fraction. Now 


1 1 1 
t= a + — 


dg +++» +a,+y 
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_ Dy + Pra 


Then =< 7 
Qr¥ + Qr—-1 


which is a rational function of y, and therefore will reduce to a 
quadratic surd A + B+/C, where A and B are rational, and C is 
a positive integer not a square. 


re, VO +P 


19. Expansion of quadratic surds. be any quad- 


ratic surd, D, P, and Q being integers, D > 0 and not a square, 
and Q@ #0. The sign before the radical is assumed positive. 
Sometimes P and Q will be written P; and Q, in order to conform 
to general notation. 

We now generalize the method used in the expansion of +/7 in 
V/D+P 


illustrating Theorem 7. Let a; be the greatest integer < O 


It may be negative or zero. Then 


VD + P, VD + P, VD + P, — 1Q, 
Se a 


Q1 Q1 Qi 
1 1 
~% * OVD + adi — Ppl 1 VDP, 
D — (a,Qi — P;)? Qe 


where Py = a,Q; — P, and 


a) Qa Da Da aiGi + 2nQiPs — PH 
Q1 Qi 


D—P? 
= Q * — afQ, + 2a,P; 
1 


Whether Qe is an integer depends upon 


2 
ae 
being an 


integer. If this function of the numbers in the original surd is not 
integral, then these numbers may be changed, without affecting 
the value of the surd, in such a way that the function will be an 
integer. That is, multiplication of both numerator and denomi- 
nator of the surd by |Q,| gives 


VD+P, VDQ?+P,1Q:,| VD+P 


Qi Qi: 1Q1| Q 
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Inthissurd, | 
D—P? DQi — PiQi 
Q +Qi 


= + (D — P}) 


an integer. 

Thus, when the expansion is begun, the surd may be assumed 
to be written in such a way that Q2, when computed, will be inte- 
gral. Note, also, from the first equality (1), that 


is an integer. 
Then, to complete the argument by induction, we define 


hs a 
Qn — VD + Prat 
Qn41 


in which Pry; = GnQn — Pn, and 


DP D=P 
(2) Qn41 = = —— — 02 Qn + 2anPr 
+ 


— Pp? 


Qn 


integer, and also from (2) that 


D — P} D — P3 
: , and a integers. Hence 


Q1 Q2 
2 


t 


Assume to be an integer. It follows that Q,4; is an 


= P? 1 e ° 
“tis an integer. But we 


have already made Q,, Qo, 


are integers for all values of 7. 


Q: 
Looe VD +P 
The complete quotients in the expansion of —--——— are 


Q 


it follows that Q; and 


therefore computed by the algorithm: 
Pr4i = AnQn — Pa 
D—P; 
Qn41 = ser eae 


The computation is facilitated by the arrangement shown in 


V 30 — 2 30 — 2? 
the expansion of age Note that 


= 2, an integer. 
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n: 1 2 8 4 i) 6 7 
P-2 2 4 3 3 4 4 
Q 138 2 7 3 7 2 7 
a 0 3 1 2 1 4 1 
; V30+4. . ; : 
Since 27 = a is identical with x3, further expansion will 
repeat former terms. 
V30 — 2 ane 
Then 43. ae (0, 3, 1, 2, 1, 4). 
EXERCISES IV 
Find the continued fractions which represent: 
= /61 — 
1; V'109. 5. “a. 9. Vu? — 2, u an integer. 
V109 +7 V61 +9 17 
ieee 6... 10. —- 
10 4 3 
/10¢ eee 
3. nla 7. Vu? + 1, u an integer. 11. V1633. 


5 


/ 6} 
4. a. 8. Vu? +u,waninteger. 12. 5 +375. 


We now prove: 


THEOREM 15. The simple continued fraction expansion of any 
quadratic surd 1s periodic. 

The method of proof will be to show that the P; and Q; can 
take but a limited number of values, which limits the number of 
VD +P; 

i 
quotient appears in the computation a second time the a; begin 
to recur. 

From algebra we recall some properties of functions involving 
quadratic surds. Let ~/z be a pure quadratic surd in which z is 
an integer and not a square. Any rational function of ~W/z can 
be written in the form a + b-~/z, in which a and BD are rational. 
If two such functions are equal, as 


a+ bV/z=c+dvVz 


then a=c and b=d 


possible complete quotients ; and when a complete 
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Consequently, if the sign of +/z is changed in both functions, the 
equality is preserved, and 


a — bz =c—dvVz 


Thus, if, in any equation whose members are rational functions of 
a pure surd +/2z, the sign of ~/z is changed throughout, the equality 
is preserved. 


Now 
(1) 2,=2= Pn—1in + Pn—2 n>2 
Qn—10n + Qn—2 
in which tn = VD +P, 
Qn 
—1/D + P, 
Let Yn = axe ts 


the conjugate surd of z,. In (1) replace 2; by yi, 2n by yn. This 
replacement is equivalent to changing the sign of ~/D in each 
member of (1), since the p’s and q’s are rational. Then 


Pn—1Yn + Pn—2 
(2) i = SS 
Qn—1Yn i Qn—2 
Solving (2) for yn, we get Fe 
Y1— Te 
Qn—2Y1 — Pn—2 Qn—2 Qn—2 
Un rc ee 
Qn—1Y1 — Pn—1 Qn—1 Pn—1 
YW — is : 
tin 
Now lin = = ig ee Ly 
n70 Qn—2 n0 Qn—1 
Pn—2 
Yi — 4 
Hence lm —— =1 
n—>0@ Pn—1 
Yi — 
Qn—1 
and we can write 
Fn a Ge rae 
Qn—1 


in which e, can be made arbitrarily small by taking n sufficiently 
large. Therefore, for sufficiently large n, y, and also y,_; are 
negative. We assume such a value of n. 
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Now, corresponding to tz_; = dn, + ae we have yn_1 = 
nr 


1 1 
Qn-1 t—- But ynr_; <0, hence - = Yn — An <— An_] S— 1. 
Yn 


n 


1 e 
Then — <— 1, and —1 <y, <0. Then since z, > 1, both 
Y e e 
expressions Ln — Yn and zr, + yn are positive and rz, — yn, > 1. 


That is 


oye MDT Pe VD +Pr _2VDC, 
oie Qn On Qn 


ess 2Pr 
hence 0 <Q, < 2\/D; and z, + y, = 0 > 0, which shows 


P, > 0. 


= P,, 
But yn = =VD+P, <0, hence P, < +/D. 


Thus we have found that 0 < P, < ~/D and 0 < Q, < 2~/D. 

Therefore, after a certain point is reached in the expansion of 
z,, the maximum number of values that x, can take is (2d + 1)d, 
where d is the greatest integer in ~/D, and the periodicity is 
established. 

20. Beginning of periodicity. We now discuss the point at 
which periodicity begins in the expansion of various types of 
quadratic surds. 

Definitions. For this purpose we define a reduced quadratic 
surd x; as one in which z; > l and —1 < y; < 0. 

Also a purely periodic simple continued fraction is one in which 
the periods begin with the first term. For example, the reduced 
1/23 +3 

7 
(1, 8, 1, 3). This illustrates: 

THEOREM 16. A reduced quadratic surd expands into a purely 
periodic simple continued fraction. 

We found above that, when y;<0, it follows that —1<y;4; <0, 
and consequently all the y; for a reduced surd lie between —1 
and 0. Then since y; = a; + ,—- : = a; — yi, and a; is seen 

Yi41 Yi41 


quadratic surd expands into the purely periodic s.c-f. 


to be the greatest integer in — 
Yi4+1 
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Now suppose that the period includes the nth quotient, n > 1, 
and that there are k terms in a period, so that 2, = n4gy 
Yn = Yn+e. Then 


dap a , and dn, = An—14k 
Yn Yn+k 


: 1 1 
Hence, since tp) = Qn—1 + — and In—14k = An—14% + ——, we 
In In+k 


have 
In—1 = Un—1+k 


That is, from the occurrence of x, in the period, follows the occur- 
ence of 2,1, and consequently of all preceding z;, including 2}. 
Thus the fraction is purely periodic. 

We now prove the converse: 


THEOREM 17. Any purely periodic simple continued fraction 
represents a reduced quadratic surd. 
Recall from the discussion of Theorem 14 that, if 


t= (a1, 2, °**, Ak; x) 
then Qux® + (Qe—1 — Pr)Z — Pr—i = O 


Since a; = a,441, we have a4, 2 l andz>1. Let y be the con- 
Pk—1 


jugate of x; then zy = — , and, sinceex > l,y < 0. 


Now the function g,2? + (qr—1 — Pe)Z — Per—1 < 0 for x = 0; 
and, for x =— 1, it becomes (qx — qe—i1) + (Pe — Pr—1) > 0. 
Hence the negative root of the equation lies between —1 and 0. 
Therefore, since x > 1 and —1 < y < 0, the surd is reduced. 


V10+4+1 
3 


As a further illustration, (1, 2, 1) = , a reduced surd. 


Now assume a non-reduced surd in which x; > 1 but y; <—1. 
Then 


1 
Yi =a, +— <-—1, where aq21 
Y2 
I e 
Or — = y,; — a < —1, hence —1 < yo < 0 and zp is a reduced 


Y2 
surd. Therefore periodicity begins with the second term. 
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If any non-reduced surd has zx; < 1, nevertheless x2 > 1, as 
are all succeeding x;. Hence the surd becomes reduced with the 
first term after z; for which —1 < y; < 0, and periodicity begins 
at that point. By Theorem 17 periodicity cannot begin sooner. 

We summarize these results in: 


THEOREM 18. If x; 1s a quadratic surd, and y, its conjugate, 
X, will expand into a periodic simple continued fraction as follows: 

(1) When xz; > 1 and —1 < y; <0, the fraction is purely 
periodic. 

(2) When x; > 1 and y; < —1, the fraction has just one non- 
periodic term. 

(3) In all other cases the fraction has one or more non-periodic 
terms, and the first periodic term occurs at the first point after 
y,; where —1 < y; < 0. 

In particular, the expansion of the pure surd ~/D comes under 
part (2) of the theorem, for ~/D > 1 and —~/D < —1. 


THEOREM 19. The last Q; in each period of the expansion of 
J/D is unity. 

By Theorem 18, (2), periodicity begins with the second term 
of the expansion. a, is the greatest integer in ~/D. Then, by 
the usual computation, P, = a, and Q, = D — ai. 

If k is the number of terms in a period, Py42 and Qy42 belong 
to the first term of the second period. Hence Pyi2 = a, and 
Qr42 = D— a?. But 


D— Piso = Qx419K+2, then D — ay es Qr41(D — a3) 


Therefore Qz41 = 1. 
21. The equation x? — Dy” = N. Wenow derive the equation 
p. — Dg = (—1)"Qn41 which finds application in the solution of 
Diophantine equations of the form xz? — Dy*® = N (D > 0). 
Expand ~/D, that is, put P; = 0 and Q, = 1, and we have 


es /D ae Pn—1<n + Pn—2 
Qn—10Xn + Qn—2 
_ VD +P, 
Qn 


/D = Pn—1 V/D + Pn—1P rn + Pr—2Qn 
Qn—1V D = Qn—1P n + Qn—2Qn 


In this put tn 


and get 
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Clearing this of fractions and equating to zero separately the 
coefficient of +~/D and the terms free from ~/D, we get 


Qn—1Pn + Qn—2Qn = Pn—a 
Pn—1Pn + Pn—2Qn = Qr—1D 
The elimination of P, between these gives 
(Pn—19n—2 — Pn—29n—1)Qn = Dr—-l rs q,—1D 
or (—1)" Qn = Pri — GAD 
Writing n for n — 1, 
Pn — TxD = (—1)"Qn41 


This equation makes possible the solution of z? — Dy? = N 
(D > 0) if, for some value of n, (—1)"Qn41 = N. 

Example. In solving x2 — 58y2 = N we expand 1/58 into a 
continued fraction getting 


1 2 J 
0 
1 


—= G& bd 
ma TO 
m= O> Be OD 
mm O bd 
> m a7 Oo 


7 4 
9 7 
1 1 


R86 3 


7 


—_ 


Then compute p; and q;. 
n 12 8 4 6 6 7% 8 9 10 


a 71 #1 1 #21 ~«21~«!1 14 1 1 
p 017 8 15 23 38 61 99 1447 1546 2993 
gq 1011 2 3 5 8 18 %190 203 393 
n 11 12 13 14 
a 1 1 1 1 
p 4589 75382 12071 19603 


q 596 989 1585 2574 


We shall consider the special values N = 9,N=-—-1,N=+11. 

Solution of x2 — 58y2 = 9. Since WN is positive, n is even, 
and 9 must be a Q; of odd order. From the above Q7 = 9. 
Then 2 = pp = 61, y =e = 8 gives one solution. In fact 
612 — 58-8? = 3721 — 3712 = 9. Since the number of terms in 
the period is odd, this value of Q; recurs with an odd subscript in 
alternating periods. That is, 


Q7 = Qa = 35 = ++: = 9 
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and an infinite number of solutions is represented by 7 = pe444t; 
y = de+i4t- Also Qe = 9 = Qo414:, and we have the additional 


solutions = pgii4t, ¥ = 98+414¢- 
Solution of x? — 58y? =—1. 


Qg=1, and t= p7=99, y=q, = 18 
In general, LT = P7414 Y = 97414: 


Solution of x? — 58y? = 1. Here n is even, and to find a Q; 
of suitable order we take Q3.7, hence 


Y= Pi44i14t, Y = 144148 


For ¢ = 0, Y= pi= 19,603, Y= 4= 2574. 

The equation x? — Dy? = 1 may always be solved by the above 
method. For, by Theorem 19, the last Q; of each period is unity. 
Then, if the number of terms, k, in the period is even, Qz41 = 1 is 
of odd order and (—1)*Q,4; = 1. If the number of terms in the 
period is odd, Qox41 is of odd order and (—1)**Qoxa1 = 1. Hence 
in the first case, x = px, Y = gz, and in the second, x = pox, y = ok. 

When one solution of the equation is known, infinitely many 
others may be gotten as follows, without the use of the continued 
fraction expansion. Let x = p, y = q be one solution. Then 


x? — Dy’ = (p? — Dq’)" = 1 
or (« + WDy) (x — WDy) = (p + WDa)" (p — VDq)” 
This equation will be satisfied by putting 
z+ VDy = (p + VDq)” 
and x — WDy = (p — WDq)” 
By adding and subtracting we get 
x = 3 [(p + VDq)" + (p — WDg)") 


y = 5 [(p + VDq)" — (p — VDg)") 
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Then, by giving different values to n, any number of solutions may 
be obtained.* 

The equation x* — Dy? =—1 may be solved if there is an odd 
number of terms in the period of the expansion of ~/D. 

For, since k is odd, (—1)*Qz41 = —1. 

Again, let x = p, y = q be one solution, then an arbitrary 
number of solutions may be obtained as follows. We have 


x? — Dy? = (p? — Dg?) =-1 
or (c& + -WDy)(t — VDy) = (p + VDq)?*(p — VW Dg)" 
which is satisfied by putting 

z+ VDy = (p + VDq)** 

x — VDy = (p — VDq)*"" 


From these 


= Bp + VD)" + (p — V Da)" 
] 
Y= 575 le + VDa) — ( - V0) 


To illustrate, solve x? — 13y? = —1. 
V13 = (3, 1, 1, 1, 1, 6) 
in which k = 5, and (—1)"Qr41 =-—1,. Then one solution is 


x= ps = 18,y =q5 = 5. Using this solution in the general 
formula, and putting n = 2, we get 


1118 + +/13-5)3 + (18 — »/13-5)3] = 23,382 


My 


1 
———— [(1 V/ 13-5)? — (18 — +/13-5)3] = 
y dig 8 + 3-5) (18 3-5)°] = 6485 
Similarly, general formulas giving an infinite number of solu- 
tions of the equation x” — Dy* = N are derived as follows, when 
one solution is known. 
Let x = h, y = k be a solution of x” — Dy? = 1 and z = p, 


*It can be shown that the solutions given by these formulas are the 
same as those given by using the various periods of the continued fraction. 
See Perron, “Die Lehre von den Kettenbruchen,” p. 104. 
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y = ga known solution of x? — Dy? = N. Then, since h? — Dk? 
= |], 


N = 2? — Dy? = (p? — Dg’) (h? — Dk?) = (ph + Dqk)? — D(pk + qh)? 


from which we get zt = ph + Dok 


y = pk + gh 


If p and q are fixed, infinitely many solutions are obtained by 
letting h and k run through all possible solutions of x? — Dy? = 1. 
We shall see below that the continued fraction expansion gives all 
possible solutions of the latter. But the general formulas just 
derived from a single solution of z? — Dy? = N do not necessarily 
give all solutions as we see from the example x? — 2ly? = 60. 
Two solutions of this equation arex = 9,y = landz = 12,y = 2. 
When one of these is substituted for x and y and the other for 
p and q in the formulas it is readily found by simultaneous solution 
that h and k cannot be integers. Hence one of the solutions can- 
not be obtained from the other by using integral values of h and k. 
However, the following theorem shows that the continued fraction 
expansion affords a method of finding all solutions of the equation 


when |N | < VD. 


THEOREM 20. Jf x = p, y = q are positive integers satisfying 
the equation x* — Dy” = N, where| N| < VD, then p/q is a con- 
vergent in the s.c.f. expansion of VD. 

First we assume N > 0. 

From p* — Dq? = N we write 


(p — VDa\(p + VDq) = N 


p N 
and -~— 4/D = ———=~ 
q q(p + Da) 
Then, since 0 < N < +/D, it follows that 
D 
0< es VD < _ Vd 
q q(p + VWDa) 
1 
and 0< ; —~VJ/D< 


2 p ) 
—— 1 
: (t+ 


THE EQUATION zx? — Dy? =N 41 


But from ; — +/D > 0, we have —7= > 1 and 


7B ~7ptl>? 


Combining these inequalities we get 


P i 

0< VD <33 

p = 1 

or 2-vol< zy 


And by using Theorem 13 the argument for N > 0 is completed. 
For use in the following we note that nothing in the proof requires 
that D and N be integers. 
In case N < 0 we rewrite the equation p? — Dq? = N in the 
1 


N —N 
form q? — p” pt in which >? 0. This is of the form 


1 —N 
of the first equation with D and N replaced by D and p respec- 


tively. By the above proof Lis a convergent in the expansion 
—== if IZ <3 But this is equivalent to the given 
= cae e giv 
a7 <VD i . 
condition |N | <+/D. Hence : is such a convergent. Then, by 


Exercises I, 12, L is a convergent in the expansion of ~/D. 
q 


It follows directly that all solutions of x* — Dy? = N, where 
|N| < WD, are among the convergents of the s.c.f. expansion of 
/D. In particular the equation for N = — 1 has no solution if 
the number of terms in the period of the s.c.f. 18 even. 


EXERCISES V 
Solve the equations: 
1. x? — 29y? =+ 1. 3. 2? — 76y? =+1. 
2. 7° — 86y? =+ 1. 4. 2° — 53y? = + 4. 


5. Find the prime factors of 1819 bv solvinz the equation x? — 1819y? = 9. 
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6. Derive the equation vp, — ug, = (—1)"Qn41 from the expansion of 


Find two solutions if possible for each equation: 
7. 5x? — 13y? =+ 8. 8. 327 — 17y? = 7. 
9. Find a solution of x? — (a? — 2)y? = 3 — 2a. 
10. Write out the general solution of x? — 7y? = 1, and from it compute 
two specific solutions. 


CuaptTer III 
CONGRUENCES 


22. Definitions. Jf a— b 1s divisible by m > 0, we say that 
a 1s congruent to b modulom. This is written a = b (mod m), or 
simply a = b, if the modulus m is implied in the context. For 
example, the difference of any two of the numbers 11, 26, 71, —4 
is divisible by 15, and we write 11 = 71 (mod 15), 26 = —4 (mod 
15), ete. 

" Similarly if a — b is not divisible by m, we say that ais incongruent 
to b modulo m and write a # b (mod m). 

From the above definitions the congruence a = b (mod m) and 
the equation a = b + qm are seen to be equivalent relationships. 

Although the special notation for congruence is thus in a way 
redundant, its invention by Gauss proved a stroke of genius which 
has stimulated great advances in the development of the theory of 
numbers. 

As a second definition we say that a = b (mod m) when, and 
only when, the remainders obtained in dividing a and b by m are the 
same. To see that this is equivalent to the first definition, we put 
a= qm-+r, and b = qom + re, where 7; and 72 are zero or posi- 
tive and <m. Then a—b=(q—qe)m+—12 with |ry—rel<m. 
Hence the condition that a — b is a multiple of m is equivalent to 
the condition that r; = ro. That is, since 71 = 4-15 + 11 and 
—4 =—1-15 + 11 we have 71 = —4 (mod 15). 

This defining of congruence in terms of remainders gives rise to 
the concept of residues. In general, if two numbers are congruent 
to each other, either is said to be a residue of the other. 

23. Fundamentals. The following theorems follow readily 
from these definitions of a congruence. 


THEOREM 1. Ifa = b (mod m), then ac = be (mod me). 
For, since a — b = qm, it follows that ac — bc = gmc, and 
ac = bc (mod mc). 


THEOREM 2. If a= b (mod m), and if d is any divisor of m, 
then a = b (mod d). 
This is a direct consequence of the first definition of a congruence. 
43 
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THEOREM 3. If a=b (mod m;), a=b (mod mg),:::, 
a =b (mod m,), where the m; are relatively prime in pairs, then 
a = b (mod m,-Mzg ---m,). 

For since a — 6 is divisible by each of the relatively prime 
integers m, it is divisible by their product. 


THEOREM 4. If a=b (mod m) and b=c (mod m), then 
a = c (mod m). 

For, since a — 6 = qym and b — c = qgm, by addition we have 
a—c= (qi + qe)m. 

From this it follows directly that all integers may be arranged 
in classes with reference to a modulus m. We define a number class 
modulo m as the totality of integers each of which 1s congruent to a 
given integer modulo m. Consequently any two integers of a number 
class are congruent to each other. It appears at once that no 
integer can belong to more than one number class modulo m. Also 
each number class contains one and only one positive integer 
<m. Thus all integers are arranged in just m number classes 
modulo m, and any integer defines the class to which it belongs and 
represents that class with reference to the modulus. 

Any set of m integers such that no two of them belong to the 
same number class is said to form a complete system of incongruent 
numbers, or a complete residue system modulo m. For example, 
such a residue system modulo 5 is 4, 6, 18, 10, 2. Each of these 
numbers represents one of the five number classes modulo 5. The 
smallest positive, or zero, residues representing these number 
classes in the same order are 4, 1, 3, 0, 2. Such a set we call a 
complete system of least non-negative residues. Another complete 
set of residues, particularly useful for computational purposes, is 
the complete set of numerically least residues, which for the modulus 
5 in the same order as the above set is —1, 1, —2, 0, 2. 


THEOREM 5. If a=b (mod m) and c=d (mod m), then 
atec=b+d (modm). 
For, since a — b = qym and c — d = qgm, we have 


(a — b) + (c — d) = (41 + GQ2)m 
or (a+c) — (6+ d) = (% + 42)m 
and (a — c) — (6 — d) = (% — Ge)m 
Therefore at+c=b+d,anda—c=b-d 
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For example, since 30 = 8 (mod 11) and 13 = 2 (mod 11), then 
43 = 10 and 17 = 6. 


THEOREM 6. If a=b (mod m) and c=d (mod m), then 
ac = bd (mod m). 

For, since a — b and c —d are multiples of m, (a — b)e + 
b(c — d) = ac — bd is a multiple of m and ac = bd (mod m). 

For example, since 15 = 2 (mod 13) and 5 = 18 (mod 13), 
then 75 = 36. 


CorotuaRy. In particular, if a = b (mod m), then a = b" 
(mod m), where n is a positive integer. 
As an immediate consequence of these theorems we can state: 


THEOREM 7. If a; = bi (mod m) and x; = y; (mod m), then 
any polynomial in the x; with the a; for coefficients 1s congruent 
modulo m to the similarly formed polynomial in the y; with the b; 
for coefficients. 

For example, 


25x? — 115xor 3+ 98242_ = 3y? — 5yoys — YiY2 (mod 11) 
whenever Ly =Y1, Lo = Yo, 73 = yz (mod 11) 


THEOREM 8A. Jf a=b (mod m), with d as any common 


divisor of a and b, and (m, d) = g, then ; = 5 ( moe ): 


b\d 
For, from a-— b= mt, we have saan say with 
d d g 
d b b 

E ; = 1. Hence 7 divides me and ; = 5 (mo s 
Example: 144 = 66 (mod 39). 
Here 6 is a common divisor of 144 and 66, also (39, 6) = 3. 
Then from the given congruence by this theorem we have 24 = 11 
(mod 13). Note that 24 = 11 (mod 39) is false, as also is 48 = 22 
(mod 39). But by Theorem 8A we may write 72 = 33 (mod 39). 


Coroutuary: In particular, if a = b (mod m), with d any com- 


mon divisor of a and b, and (m, d) = 1, then Zi = 2 (mod m). 


Example: Since 36 = 15 (mod 7), and (7, 3) = 1, then 
12 = 5 (mod 7). 
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THEOREM 8B. If a = b (mod m), then (a, m) = (b, m). 

For from the congruence we have a = 6 + mt. From this it 
follows that any number which divides m and either of the numbers 
a or b must divide the other. In particular we note that, if 
(a, m) = 1, then (b, m) = 1, and vice versa. 

This completes the statement of the fundamental theorems 
governing the usual operations with congruences. A _ limited 
analogy with the corresponding operations with equations is evi- 
dent. The fact that Gauss’s notation sets forth this analogy 
clearly is one weighty reason for its importance. 

The complete set of least residues modulo m contains ¢(m) 
numbers prime to m. It follows then from Theorem 8B that any 
complete residue system contains just ¢(m) integers prime to m. 
Such a set of ¢(m) integers is called a reduced residue system 
modulo m. A reduced residue system modulo 10 is 11, 13, 17, 9. 


THEOREM 9. If x takes all the values of a complete residue 
system modulo m, and if (a, m) = 1, then ax + b also takes the 
values of a complete residue system modulo m. 

In particular, any arithmetic progression of m integers, in 
which the common difference is prime to m, forms a complete 
residue system modulo m. 

We prove this by showing that no two of the values of az + 5b, 
obtained by putting z = 2x, and Ze, are congruent. Suppose 


ax; +b =are+b 
Then a(z; — X2) = 0 


and, since (a, m) = 1, we would have x; = 2, which is contrary 
to hypothesis. Therefore 


az; + b axe + b 


EXERCISES I 


Find one value of x which satisfies: 

1. 1502 + 45 = 0 (mod 11). 

2. 4622 — 731 = 0 (mod 13). 

3. Prove that, if ab = cd (mod m), b = d (mod m), and (b, m) = 1, then 
a =c (mod m). 

4. Show that any integer is congruent to the sum of its digits modulo 9. 

5. State and prove a similar proposition for modulus 11. 

6. Show that (a + b)? = a? + b? (mod p), where p is a prime. 
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7. Tabulate the values of 5x + 2 obtained by letting zx = 0, 1, 2, ---, 11. 
Show, by reducing them to their least positive residues modulo 12, that they 
form a complete residue system. 

Do the same for 7x + 3. 

8. Give a second proof of Theorem 7, Chapter I: ¢(mn) = ¢(m)¢(n) 
when (m,n) = 1. 

Suggestion: nx + b will take all values 0, 1, 2, 3, ---, mn — 1 as we put 
b=0,1,2,---,n —landz = 0,1, 2,---,m— 1. 

If bi is a value of b prime to n, then ¢(m) numbers of the arithmetic pro- 
gression nx + 6b; are prime to both m and n. 

9. Show that the congruence x? = 3 (mod 7) has no solution. 

10. Prove that, if each of the ¢(m) numbers of a reduced residue system 
modulo m is multiplied by a number prime to m, then the products form a 
reduced residue system modulo m. 

11. Arrange the numbers 2, 3, 4, ---, 15 in pairs, a and 6, such that for 
each pair ab = 1 (mod 17). 


24. Fermat’s theorem. THEOREM 10. Jf p is a prime and 
(a, p) = 1, then a®~! = 1 (mod p). (Compare with Exercise 12, 
page 14). 

The numbers az, where x = 1, 2, ---, p — 1, are congruent in 
some order to the numbers 1, 2, ---,p — 1. Therefore 


a-2a-3a:4a---(p — l)a = 1-2-3-4---(p — 1) (mod p) 


Or a®—"(p — 1)! = (p— 1)! 
But ((p—1)!,p) =1 
Hence ag? 1 =1 


Since a can be any integer prime to 7, it can take p — 1 incon- 
gruent values. This is equivalent to saying that the congruence 


2?! — 1 = 0 (mod p) 
where p is a prime, has just p — 1 incongruent roots. 


Corotuary. If p is an odd prime and not a dimsor of a, then 
either 
az'?—)) = 1(mod p) or a??—) =— 1 (mod p) 
This follows by writing 
a?—t — 1 = (a2) — 1) @a—) + 1) = 0 (mod p) 


THEOREM 11 (Euler’s generalization of Fermat’s theorem). If 
(a.m) = landm > 0, then a®™ = 1 (mod m). 
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Let 1, Ne, M3, °° +, Ng(m) be a reduced residue system of numbers 
<m and prime to it. Then an, ang, ang, ---, ANgrm) 1S also a 
reduced residue system modulo m. Hence by Theorem 6 we write 


AN, *ANg* + -ANgim) = Ny °Ng* **Ngim) (mod m) 


or a®™ TIn; = IIn; (mod m) 
But (IIn,;, m) = ] 
Therefore a*™ = 1 (mod m) 


Since, in this result, a is necessarily prime to m, it follows that 


the congruence 
2?) = 1 (mod m) 


has just ¢(m) incongruent solutions. 

The direct converse of Fermat’s theorem would be: Given 
a®—! = 1 (mod n), then n is a prime. Clearly this is not a true 
proposition, since we may take a = 1 (mod n). A less trivial 
example of its failure is 414 = (47)? = 167 = 1 (mod 15), and 15 
is not a prime. However, by including another condition in the 
hypothesis, a modified converse may be stated and proved as 
follows. 


TuHEeorEM 12. If a®~!=1 (mod n), where (a, n) = 1, and 
a® # 1 (mod n) for g any divisor of n — 1 and less than n — 1, then 
n 2s a prime. 

Assume n to be composite. Then ¢(n) <<n—1. Let 
(¢(n),n — 1) = g. By Theorem 2, Chapter I, x and y can be 
found so that g = ¢(n)x + (n— l)y. Since 0 < g < n — 1, one 
of x and y will be positive and the other negative. 

Assume z < 0 and y > 0. 

Now by Theorem 11 a*” = 1 (mod n) and by hypothesis 
a"! = 1(modn). Hence a!*!'*™ = 1 (mod n) and a¥"—-) = 1 
(mod n). Applying Exercises I, 3 to these congruences, we may 
write 

gt *(™) qua) = gr d(n)tyn—l) = gf = 1 (mod n) 


which is contrary to hypothesis. 
Similarly this result may be obtained when xz > 0 and y < 0. 
Therefore the assumption that n is composite is false and 7. is 
prime. 
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Note that in the example 4!* = 1 (mod 15) the condition that 
a® # 1 (mod 15) fails for g = 2 since 47 = 1 (mod 15). 

25. Wilson’s theorem. THEOREM 13. If p 1s a prime, then 
(p — 1)! +1 = 0 (mod p). 

If both a and b are limited to the values 1, 2, 3, ---, (p — 1), 
then it follows from Theorem 9, or from Exercise 10 above, that 
there is just one value of each for a given value of the other which 
makes ab = 1 (mod p). Thus the numbers 1, 2, 3, ---, (p — 1) 
are arranged in pairs such that the product of the numbers of a pair 
is congruent to 1 modulo p. 

If the members of a pair are equal, we have a? =1 or 
(a + 1)(a — 1) = O, and p divides eithera + lora— 1. Hence 
either a =—1 = p-—lor a=1, and 1 and p — 1 are the only 
numbers of the set for which this can occur. Hence with the 
remaining numbers of the set we can write 


2-3-4---(p —2) = 


and (p —1)!=p—1=-1 (mod p) 
EXERCISES II 
1. Show that x!’ — x = 0 (mod 2730) for all values of x. 
2. State and prove the converse of Wilson’s theorem. 
3. Prove that n® — 1 = 0 (mod 504), when n is not divisible by 2, 3, or 7. 
4. For what values of n is n'* — 1 = 0 (mod 65,520)? 
5. Show that, if p and q are different primes, p?! + q?'—1=0 


(mod pq). 

6. If pisa pene of the form 4n + 1, show that [2 (p — 1) i is a solution of 
the congruence x” -+1=0 (mod p:p). Suggestion: Note that p—-k=—k 
(mod p). 

7. If p is a prime of the form 4n — 1, show that | 4(p — 1) is a solution 
of the congruence x” — 1 = 0 (mod p). 

8. Prove Fermat’s theorem by showing that 


(21 + te +3 +--++20)? = af + 22 +---+23 (mod p) 


and putting each z; = 1. 

9. Prove that, if d is the least value of xz > 0 for which a? = 1 (mod m), 
where (a, m) = 1, then d is a divisor of ¢(m). Suggestion: Assume ¢(m) = 
gd +r, where 0 <r < d, and use Euler’s generalization of Fermat’s theorem. 

10. Prove that, if dis the least value of z > 0 for which a* = b* (mod p), 
where p is a prime which does not divide a or b, then p — 1 = 0 (mod @). 

11. Use Exercise 10 to find the factors of 3!! — 1 = 177,146. 

12. Show that 2!° + 1 = 65,537 is a prime. 
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Use Fermat’s theorem to solve the congruences: 
13. 7x = 1 (mod 19). 15. 432 = 7 (mod 96). 
14. 13x = 11 (mod 29). 16. 862 = 14 (mod 96). 


17. Prove that x° has the same right-hand digit as x, where z is any integer. 

18. Prove that z° has one of the forms 19n, 19n + 1, where z is any integer. 

19. Show that 18! + 1 = 0 (mod 437). 

20. Show that 2(p — 3)! + 1 = 0 (mod p), where p is an odd prime. 

21. Prove that, if m? +n? =0 (mod p), then m? + n? =0 (mod 7”), 
where p is an odd:prime. 


26. Roots of congruence. Congruences involving unknown 
quantities have already entered into our discussion. In particular 
we noticed that the Fermat theorem means that any number prime 
to p satisfies the congruence z?~' = 1 (mod p). Likewise, from 
the generalization of this theorem, we know that any number prime 
to m satisfies the congruence 2 = 1 (mod m). A number which 
satisfies a congruence when substituted for a variable occurring 
therein is called a root of the congruence. Clearly, if x; is a root 
of a congruence having the modulus m, the infinitely many integers 
of the number class x; + mi are also roots. Two integers of this 
number class are not regarded as distinct roots. We may then 
speak of a number class as satisfying the congruence. Thus the 
number of roots of a congruence means the number of number 
classes with respect to the modulus which satisfy the congruence. 
Then the congruence z?~! = 1 (mod p) has p — 1 roots, and 
2°") = 1 (mod m) has ¢(m) roots. We now address ourselves to 
the problem of solving certain congruences. 

27. Linear congruences. ‘The general linear congruence in one 
variable may be written az = b (mod m). 

First we assume (a, m) = 1. Then by Theorem 9, as x takes 
the values of a complete residue system modulo m, az also runs 
through m incongruent values. Hence az will be congruent to 
b for just one value of z, and the congruence has just one root. 

This root may be found by writing the congruence in the form 
of the Diophantine equation az — my = )b, and solving the equa- 
tion by either of the methods already given. Or the root may be 
written out by means of Fermat’stheorem. That is, x = a%”—1.), 
for a-(a%™—!.b) = a®™ -b = b (mod m). 

Example: Solve 14x = 9 (mod 15). 


¢#(15) = 8. Hence zx = 147-9 
Since 147 = 1, 14 = 14, and z = 6. 
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However, the solution can be readily found in many cases by 
inspection and trial, facilitated by suitable changes in the coeffici- 
ents of the congruence. 

For example, solve 362 = 7 (mod 157). 


We have 362 =—150, or 672 =—25 
and 6z = 132, or «x = 22 


Again, solve 7z = 15 (mod 40). 
Since 7 is prime to 5 = (15, 40), x must be a multiple of 5, 
say 5y. Then 
7-5y = 15 (mod 40) 


7y = 3 (mod 8) 
—y = 3 (mod 8) 
=—3 = 5 (mod 8) 
and x = Sy = 25 


We now proceed to prove the theorem concerning the number 
of solutions of the general linear congruence in one unknown. 
THEOREM 14. The congruence 


(1) ax = b (mod m) 


where (a, m) = d, has no solutions or exactly d solutions, according 
as b 1s not, or is, a multiple of d. 

When the congruence is written in the form az — my = }, it is 
evident that any common divisor of a and m must divide b also. 
This proves the first part of the theorem. 

Also, we have proved the theorem for d = 1. 

We now assume that d > 1, and b is a multiple of d. Let 
a = a'd, b = b’d, and m = m’'d. Then by Theorem 8A we write 


(2) a’x = b’(mod m’) 


in which (a’, m’) = 1. Clearly, any value of zx which satisfies 
either (1) or (2) satisfies the other. Now (2) has just one solution, 
the number class xz; + m’y. But the numbers of this class modulo 
m’ are not all congruent modulo m. Putting y = 1, 2,---,d— 1, 
we get the d numbers 


1, 2%, + m’, ty 2m’, ets SO er (d _ 1)m’ 
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which are incongruent to each other modulo m. Also any other 
value of y would give a root congruent to one of these modulo 
m = dm’. Hence, in this case, there are just d distinct roots of (1). 


Example: Solve 


(1) 95x = 90 (mod 115) 
Here (95, 115) = 5, and we write 
(2) 19x = 18 (mod 23) 


The solution of (2) is x = 7+ 23y. Giving y the values 
0, 1, 2, 3, 4, we get 
x = 7, 30, 53, 76, 99 


as the distinct solutions of (1). 


EXERCISES II 
Solve the congruences: 
1. 3502 = 487 (mod 729). 3. 16x = 24 (mod 64): 
2. 39x = 129 (mod 42). 4. 9002 = 7 (mod 589). 
Determine the number of solutions of each of the congruences: 
5. 432 = 7 (mod 96). 6. 442 = 14 (mod 96). 7. 60x = 120 (mod 720). 


28. Linear congruences, more than one unknown. We now 
consider briefly linear congruences in more than one variable. 

THEOREM 15. The congruence ax + by + c = 0 (mod m) has 
no solutions (x, y) or dm solutions according as c 1s not or 1s divisible 
by d. Hered = (a, b, m). 

Obviously c must contain d as a factor if any solutions of 


(1) ax + by + c = 0 (mod m) 
exist. Then, dividing through the congruence, including the 
modulus, by d, we get 
(2) a’x + b’y + c’ = 0 (mod m’) 
in which (a’, b’, m’) = 1. 
Now let (a’, m’) = d’; then, if (2) has solutions, 
(3) b’'y + c’ = 0 (mod d’) 


But, since (b’, d’) = 1, (3) has Just one solution modulo d’. Let it 


be y+ d’t. This yields 7 incongruent values of y modulo m’, 


LINEAR CONGRUENCES, MORE THAN ONE UNKNOWN 53 


each of which, when put in (2), enables us by Theorem 14 to find 
d’ incongruent values of z modulo m’. Then in all we have 
4 

rd = m’ pairs of values of z and y, incongruent modulo m’, 
which satisfy (2). 

Let (71, yi) be one such solution of (2). Then 2; + m’t and 
y; + m’'t, where? = 0, 1,2, ---,d — 1, represent d values of x and 
d values of y, which may be paired to give d? incongruent solutions, 
modulo m, of (1). But there are m’ pairs of values such as (2), y;). 
Hence in all we have d?m’ = dm incongruent solutions of (1). 


Example. Find the solutions of 
(1) 122 + 10y — 6 = 0 (mod 42) 
Here (12, 10, 42) = 2, which divides 6. Then we get 
(2) 6x + 5y — 3 = 0 (mod 21) 
in which (6, 21) = 3. Hence 
(3) 5y — 3 = 0 (mod 3) 


The solutions of (3), incongruent modulo 21, are y = 0, 3, 6, 9, 
12,15, 18. For each of these seven values of y substituted in (2) 
there are three values of x modulo 21. Thus we get the 21 
solutions of (2): 


(4, 0), (5, 3); (6, 6), (0, 9), (1, 12), (2, 15), (3, 18), 
(11, 0), (12, 3), (13, 6), (7,9), (8, 12), (9, 15), (10, 18), 
(18, 0), (19, 3), (20, 6), (14, 9), (15, 12), (16, 15), (17, 18) 


But each of these solutions (z, y), when taken in reference to 
modulus 42, may be written in the form z + 21t, y + 21t, where 
t = Oor 1, and therefore will yield four solutions of (1), viz. 


(x,y), (@@+21,y), @yt2l), and (¢ + 21,y + 21) 


For example the solution (5, 3) of (2) yields the solutions (5, 3), 
(26, 3), (5, 24), and (26, 24) of (1). 

Thus a complete tabulation of the roots of (1) would have 84 
pairs of values of x and y incongruent modulo 42. 
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EXERCISES IV 


1. Find the number of solutions of 12x — 39y +3 =0 (mod 30). 
Tabulate the solutions of the reduced congruence (2). Find all solutions of 
the given congruence which are derived from one solution of the reduced con- 
gruence. 

2. Find all solutions of the congruence 10z + 7y + 19 = 0 (mod 15). 

3. How many solutions has each of the congruences: 

(a) 14% — Vy +10 = 0 (mod 28). 
(b) 132 + 26y + 39 = 0 (mod 52). 


4. Prove, by induction, that the linear congruence in n unknowns 
121 + Gere +:+++ Gntn + Gn41 = 0 (mod m) 


is satisfied by just dm”—! sets of values incongruent modulo m, where d = 


(a1, Qe, +++, Gn, m), or has no roots, according as dy41 is, or is not, divisible 
by d. 
Suggestion: Write the reduced congruence 
(2) a,x, + agte +-+++ antn + On41 = 0 (mod m’) 
Let (a;, m’) =d’. Then 
(3) agre + agrg +--+ + Gntn + On41 = 0 (mod d’). 


Assume the theorem true for m — 1 unknowns, and enumerate the solutions 
of (3), then of (2), and finally of (1). 


29. Simultaneous congruences. We now consider the finding 
of solutions, if any exist, of the set of stmultaneous congruences: 


(1) r=b;(mod m,), (2) x=be(mod me), ---, (k) r=b,(mod m,). 
From (1), z=m,y+0,. Put this value in (2) and my+b; =be 

(mod mg), or 

(k + 1) my = be — b; (mod mz) 


Now (k + 1), and consequently the pair (1) and (2), is solvable if, 
and only if, bb) — 6; = 0 (mod d), where d = (m,, m2). Then, if 
(k + 1) has one or more solutions, they will differ by multiples of 


m 
= , having the form y; + =e t. Hence 


m mm 
r= m(ys +t) +, = min +b t ria. 
Thus the values of z, which satisfy both (1) and (2), differ by 


m,Mo2 


d 


multiples of , which is the l.c.m. of m,; and mg. Then, if 2; 
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is such a value of x, the congruences (1) and (2) may be replaced 
by the single congruence 
(k + 2) t= 71 (mod ey) 


MMe 


where |; = 


Now (k + 2) and (3) may be considered simultaneously, as 
were (1) and (2), and, if they are solvable, we arrive at a congruence 


(k + 3) XL = 2X (mod lz) 


whose solutions satisfy (k + 2) and (3), and consequently (1), (2), 
and (3). l,is the].e.m. of J, and m3 and therefore of m1, mz, and mz. 

By continuing this process any existing solutions of the set of 
simultaneous congruences may be found. Such solutions will differ 
by multiples of the l.c.m. of the moduli. Emphasis should be 
given to the above necessary and sufficient condition that any two 
of the congruences have a common solution. We then may state: 

THEOREM 16 (Chinese remainder theorem). Numbers which 
satisfy the congruences x = b, (mod mj), ---, X = by (mod m,) exist 
af the m; are relatively pene pairs, and such numbers constitute a 


single number class modulo II m. 
1 


In addition we do not lose sight of the fact that the congruences 
may have simultaneous solutions even though some or all of the 
m; have common factors other than unity. 


COROLLARY. Any number of congruences in one variable and 
of any degree, such that each has at least one solution, and in which 
the moduli are relatively prime in pairs, have at least one common 
solution modulo |, the product of the modult. 

For, let x1, Zo, -+-, 2% respectively be the roots of k such con- 
gruences. By Theorem 16 we can always find a number which is 
congruent to each x; with respect to its modulus. 

The method of simultaneous congruences can be used in solving 
linear congruences with composite modult. It is sufficient to illustrate. 

Solve 


(1) 17x = 2 (mod 210). 
210 = 2:3:5-7. Then (1) is equivalent to the set of congruences 
17x = 2 (mod 2) 17x = 2 (mod 5) 


17x = 2 (mod 3) 17x = 2 (mod 7) 
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Solving each of these, we get respectively 
(2) x = 2 (mod 2) (4) x = 1 (mod 5) 
(83) x = 1 (mod 3) (5) x = 3 (mod 7) 


From (2) x = 2y, +2. Putting this in (3), we get y; = 1+ 3: 
and x = 4+ 6t. Hence (2) and (8) are equivalent to 


(6) x = 4 (mod 6) 
Combining (6) and (4) we find them to be equivalent to 
(7) x = 16 (mod 30) 


In the same way (7) and (5) may be replaced by 
(8) x = 136 (mod 210) 
which gives the solution of (1). 


EXERCISES V 


Find a common solution, when such exists, for the sets of congruences: 


1. zx = 8 (mod 15), x = 11 (mod 21), 
z= 5 (mod 9), xz = 2 (mod 12). 

2. x= 9 (mod 14), x = 6 (mod 28), 
xz = 11 (mod 20). 


3. 2° = 1(mod 7), 2z* = 3 (mod 13). 
4. 216 = 1 (mod 17), x 6 (mod 11). 
5. 7x = 5 mod 16), xz’ = 5 (mod 11), 


52x 6 (mod 12). 
6. x = a (mod 16), x = 6b(mod 5), 
x = c(mod 11). 


7. Find the two least positive integers having the remainders 2, 3, and 2 
when divided by 3, 5, and 7, respectively. 

Solve the following congruences by the method of this section: 

8. 232 = 77 (mod 180). 

9. 132 = 141 (mod 385). 


30. Congruences of higher degree. We now consider the 
general congruence in one unknown 


f(x) = agx” + ayx™ 1 + +--+ + an = 0 (mod m) 


where the a; are not aJl congruent to zero modulo m. 
We first show how to reduce the general case to that in which 
the modulus is a power of a prime. 
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THEOREM 17. The number of roots of the congruence 
(1) f(x) = 0 (mod m) 
ts the product of the numbers of roots of the congruences 
(2) f(x) = 0 (mod m,), ---, f(z) = 0 (mod mp) 
wherem = f mj, and the m, are relatively prime in pairs. 


For by applying Theorem 16 each set of roots of (2) yields 
one and only one root of (1). Also any number which satisfies (1) 
obviously satisfies each congruence of (2) uniquely. Thus there is 
a one-to-one correspondence between the roots of (1) and the sets 
of roots of (2). Since the number of sets of roots of (2) is the 
product of the numbers of roots of the individual congruences of 
(2), the theorem follows. 

This theorem is illustrated in solving the congruence 


(1’) xz? — 9 = 0 (mod 91) 
Factoring the modulus, we form the congruences 

(2’) x? — 9 = 0 (mod 7) 

(3’) z* — 9 = 0 (mod 13) 


The roots of (2’) are r =+3. x ==+3 are also the roots of (3’). 
(See Theorem 18 below.) Then the sets of roots of (2’) and (3’) 
are 3, 3;3, —3; —3, 3;and —3, —3. It appears at once that both 
3 and —8 are solutions of (2’) and (8’) and hence of (1’). The 
other two solutions of (1’) are found by getting the solutions of the 
two sets of simultaneous congruences 


x = 3 (mod 7) x =-—3 (mod 7) 
x =—3 (mod 13) x = 3 (mod 13) 


by Theorem 16. These solutions are 10 and —10, respectively. 
Hence the four solutions of (1’) are +3, +10. 

Now if in (1) m = IIp#* is the factorization of m into powers of 
distinct primes, we have merely to set m = IIp;* in order to obtain 
the desired reduction. 

Now the m,; of the general congruence (1) may be taken as 
powers of distinct primes, and thus the study of congruences is 
reduced to the study of those having powers of primes as moduli. 
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31. Factor theorem modulo p. We then consider first the 
congruence 


(3) f(x) = apt” + ayz™* + --- + a, = 0 (mod p) 


in which the modulus is a prime. 

We shall sometimes find it necessary to regard zx in f(z) not as a 
number but as a mere indeterminate symbol. If z is such an 
indeterminate, a congruence like 


f(z) = g(x) = box” + byx™* + +--+ + b, (mod p) 
is to be interpreted as meaning 
do = bo, a1 = bi, °+*, Qn = bn (mod p) 


or, if we prefer, that 


f(z) = g@) + phe) 


h(x) being a polynomial with integral coefficients, is an algebraic 
identity. We shall speak of this relation as zdentical congruence 
of f(x) and g(x). 

If f(z) =g(z) (mod p) identically, then by Theorem 7 f(a) =g(a), 
where a is any integer. But f(a) = g(a) for all integers does not 
imply f(z) = g(x) identically. For example, a° = 6a (mod 5) for 
all integral values of a, but 2° = 6x (mod 5) is not an identical 
congruence. This is in contrast to the case of algebraic identity of 
polynomials. 

Algebraic division of two polynomials f(z) by g(x) leads to an 
algebraic identity of the form 


f(x) = q(x) -g@) + r(@) 


Here if the degree of g(x) is m, then the degree of g(x) is n — m, 
while that of r(z) does not exceed m — 1. If the coefficients in 
f(x) and g(x) are all integers and the leading coefficient of g(x) is 
unity, the coefficients in q(x) and r(x) will all be integers. If in 
the process of performing the division we alter any of the coefficients 
by adding or subtracting multiples of p, we are led to an identical 
congruence 


f(x) = q(x)-g(z) + r(x) (mod p) 


Such division is called division modulo p. If r(x) = 0 (mod p), 
g(x) is said to be a factor modulo p of f(z). 
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A polynomial of the highest degree which is a factor modulo p 
of each of two polynomials is said to be their g.c.d. modulo p. It 
can be found by the Euclidean algorithm for finding the g.c.d. 
This is seen in algebra to be applicable to ordinary polynomials. 
It is also applicable to polynomials modulo p, provided that the 
divisions are performed modulo p. 

In particular, if for g(x) we take z — a, r(x) will be a constant, 
and we have the identical congruence 


f(x) = qe): (@ — a) + r (mod p) 


The necessary and sufficient condition for a to be a root of (3) is 
that r = 0 (mod p), for then 


f(a) = q(a)-(a — a) = 0 (mod p) 


Thus, if ais a root of f(x) = 0 (mod p), (x — a) 1s a factor modulo p 
of {(x). 


For example, we see that 2 is a root of 
(4) 62° + 52? + 52 — 1 = 0 (mod 7) 
By division modulo 7 
62° + 5x? + 5x — 1 = (62? + 3x + 4) (x — 2) (mod 7) 


and x — 2 is a factor modulo 7 of the left member. Now since 
7 is a prime any other roots of (4) must satisfy 


62? + 32 + 4 = 0 (mod 7) 
Evidently 


627 + 82 +4 =—2? +32 +4 = (x +1) (—2 + 4) (mod 7) 


which shows —1 and 4 to be roots of this congruence and hence 
of (4). 
As an example of a congruence having no root we write 


x? — 82 + 13 = 0 (mod 5) 


There are but five integers modulo 5 to consider as possible roots, 
and by actual substitution in the given congruence or in 
x? + 27 — 2 = 0 these may be seen not to satisfy the congruence. 

32. Number of roots. Theorem 18, now to be proved, is entirely 
analogous to the corresponding theorem for algebraic equations 
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if only real roots of the latter are considered. Indeed we recall 
that if the n roots of the algebraic equation 


(5) f(z) = agz” + ayz™* + --- +a, = 0 
AIe Q1, M2, °**, An, then 
(6) f(x) = ao(z — ay) (x — ag) +++ (& — an) 


It will be further recalled that by comparing coefficients of like 
powers of z in (5) and (6) we find that a; = (—1)*ag times the sum 
of the products of the roots taken 7 at atime. This result will be 
found presently to have an analogue for congruences. 


THEOREM 18. A congruence of degree n, in one unknown with 
a prime modulus, whose coefficients are not all zero, has at most n 
distinct roots. 

To prove this we assume that (3) has the n roots a1, ag, 
Q@3,°°*,@n. Then by the above discussion f(z) = qn_1(%)(r — ay) 
(mod p), in which qg,_;(x) denotes a polynomial in z of degree 
n-—1. Inthe same way, since ag is a root of gn_1(z) = 0 (mod p), 
we have 

Qn—1(%) = Qn—2(z) (% — ae) (mod p) 


or f(e) = Gn—2(z) (& — ag) (© — ay) (mod p) 
And finally, 

(7) f(z) = ao( — an) (© — an—i) +++ (&@ — ay) (mod p) 
Now if (3) has a root 8 distinct from the a;, then 

(8) f(8) = ao(B — an) (8 — an—1) «++ (8 — a1) (mod p) 


and, since dj # 0, one of the factors B — a; = 0, which contradicts 
the assumption that 6 is distinct from the a;. Hence the theorem. 


Corouuary 1. If (8) has the n distinct roots ay, ag, -*+, Qn, 
then a; = (—1)'ao times the sum of the product of the a’s taken i at 
a time (mod p). 

This follows by comparing coefficients in the identical congru- 
ence (7). 

It is clear that the discussion of the theorem is not changed if 
two or more of the roots are equal. 

Suppose that (8) has n+ 1 distinct roots. From (8) this 
requires that @d9 = 0. The congruence is then of at most degree 
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n-—1. And by the same argument, a,, and finally all the a,, 
would be = 0. Hence: 


CoroutuaRy 2. If a congruence of degree n in one unknown, 
and with a prime modulus, hasn + 1 distinct roots, then its coefficients 
are all divisible by the modulus. 

When p is a prime, it follows from Fermat’s theorem that the 
congruence x?~! — 1 = 0 (mod p) has the roots 1, 2, 3, ---, p — 1. 
Therefore we have 


x?) —1 = (¢ — 1) @ — 2) --- @— p+ 1) (mod p) 
or x?! — 1 — (x — 1) (a — 2) --- (x —p + 1) = O (mod p) 
In this congruence, which has p — 1 distinct roots, the coefficient 


of z?~! is zero. Hence by Corollary 2 all coefficients of the con- 
gruence are divisible by p, and by Corollary 1 we have 


THEOREM 19. Jf pis a prime and r 1s any number less than 
p — 1, the sum of the products of the numbers 1, 2, 3, ---, p—1 
taken r at a time 1s divisible by p. 

Also we have here a second proof of Wilson’s theorem, since 
from the constant term of the congruence (p — 1)! + 1 is divisible 


by p. 
We can now prove 


THEOREM 20. If pis a prime and d isa divisor of p — 1, there 
are exactly d roots of the congruence 


(1) z* — 1 = 0 (mod p) 
Since d is a divisor of p — 1, we have by algebraic factorization 
x?) — 1 = (2* — 1)-¢(x) (mod p) 


where g(x) is a polynomial of degree p — 1 — d in @, not. all of 
whose coefficients are zero. Then the congruence 


q(x) = 0 (mod p) 
has at most p — 1 — d roots. And since the congruence 
z?—! — 1 = 0 (mod p) 


has exactly p—1 roots, (1) must have at least p—1—(p—1—d)=d 
roots. But, by Theorem 18, (1) has at most d roots. Hence it 
has just d roots. 
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The following is of theoretical interest in finding the roots of a 
congruence, and illustrates division with respect to a modulus. 
Let it be desired to find the roots of (1) f(z) = 0 (mod p), of 
degree n S p — 1, p anodd prime, and of which zero is not a root. 

The congruence (2) 2x?~! — 1 =0 (mod >), we know, has 
just p — lroots. Let g(x) of degree r S n be the g.c.d. modulo p 
of f(z) and z?~! — 1. Thenthe congruence (3) g(x) = 0 (mod p) 
has just r distinct roots, for (2) has p — 1 roots and g(x) is a factor 
of z?—! — 1. Theser roots of (3) are also roots of (1). Moreover, 
any root of (1), since it is also a root of (2), must be a root of (3). 
Hence we see that (1) has just r distinct roots, and they are the 
roots of (3). However, some of these roots may be multiple roots 
of (1), though (3) cannot have multiple roots because (2) has none. 

To illustrate, find the roots of 


(1) 2r* + x? — 227 — 32 + 2 = 0 (mod 7) 


The g.c.d. modulo 7 of this polynomial and 2° — 1 is 527 — x + 3. 
Then the roots of 


(2) 52? — x + 3 = 0 (mod 7) 


are found to be 1 and 2. Hence they are the distinct roots of (1). 

Dividing 2z2* + x2? — 227 — 32 +2 by (x — 1) (x — 2), or by 
52° — 2 + 3 =—2(x — 1) (x — 2), the quotient is congruent to 
z* + 4, and neither xz = 1, or 2 is a root of x? + 4 = 0 (mod 7). 
Therefore x = 1, 2 are the only roots of (1). 


EXERCISES VI 


Find all the solutions of the congruences: 

1. x? — 2 = 0 (mod 161). 

2. x? — 3 = 0 (mod 143). 

3. x? — 5 = 0 (mod 77). 

4. Determine the number of solutions of the congruence z® — 1 =0 
(mod 35). 

5. Show that the g.c.d. of 2! — 42° — 2? — 2x — 2 and x* — 1 modulo 5 
is a constant, and hence that the congruence x* — 42° — x? — 2x — 2 =0 
(mod 5) has no solution. 

6. Find the roots of 427 — 827 — 3x + 3 = 0 (mod 11). 


33. Power residues. The powers of a, or the number classes 
defined by them, modulo m are known as power residues of a modulo 
m. For example, the powers of 2: 2, 4, 8, 16, 32, 64, 128, 256, --- 
when taken modulo 9 are congruent respectively to 2, 4, 8, 7, 5, 
1, 2, 4, ---, the latter being referred to as the power residues of 2 
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modulo 9. Likewise the power residues of 5 modulo 12 are 5, 1, 
ae Peers 

In general we will assume (a, m) = 1. Then the powers of a 
are prime to m and, when reduced to their least positive values 
modulo m, must be less than m and prime to it. Since there are 
but (m) such values, if more than ¢(m) powers of a are taken, at 
least two of them must be congruent. Let a*® = a” (mod ™m), 
s>r. Then a®* = 1 (mod m). 

If t is the least positive exponent for which a’ = 1 (mod m), 
then a is said to belong to the exponent t modulo m. This relation- 
ship may be indicated symbolically thus, a—t(m), or if the 
modulus does not need to be specified, simply a—>t. In the above 
examples it appears that 2 — 6(9) and 5 — 2(12). 


THEOREM 21. If a— t(m), and if a" = 1 (mod m), then uisa 
multiple of t. 

For let u = qt+7, where OS r<t. Then a® = a%?** = 
a'.a’ = a" (mod m). But since a“ = 1 we get a” = 1, and this 
contradicts the hypothesis that ¢ is the least exponent for which 
a' = 1, unlessr = 0. Hence u = ¢t. 

We recall now that a*” = 1 (mod m), and therefore can state 
the 

CorotuaRy. If a— t(m), then t is a divisor of o(m). 

The following is a complete table of power residues modulo 13. 
The top row shows the indices of the powers. The third row 
contains the residues of the powers of 2; the fourth row, the same 
for 3, etc. Illustrations of the above theorem and corollary may 
be easily noted. The least numerical residues are used. 


Power ResipuEs Moputo 13 
a 


a 1 z 3 4 7) 6 7 8 9 10 11 12 
1 1 1 1 1 1 1 1 1 1 1 1 1 
2 2 4 —6§ 3 6 -—-l1 -2 —4 5 -—-3 -—6 1 
3 3-4 1 3-4 1 3-4 1 3. -4 1 
4 4 3-1 -4 -38 1 4 3 -1 -4 -38 1 
5 5 —-1l —5 1 5 -—l -—5 1 5 -—1 —65 1 
6 6 -3 -5 —4 2 —-1 -—6 3 5 4 —-2 1 

—6 -6 -3 5 -4 -2 -Il 6 3. -—5 4 2 I 
—-§5 -—-5 —-1 5 1 -5 —!1 5 1 —-5 —-1 5 1 
—4 —-4 3 1 —4 3 1 —4 3 1 —4 3 1 
—-3 -3 -4 -1 3 4 1 -—-3 -4 -1 3 4 1 
~2 —2 4 5 3 -6 -1 2 —-4 -5 -—3 6 1 
-1 -1 1 ~—1 i —1l 1 —1l 1 —1 1 —-1 1 
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EXERCISES VII 


1. Make a complete table of power residues for modulus 19. 
2. Do the same for modulus 10. 
3. Do the same for modulus 29. 


THEOREM 22. Ifa—tandb—u modulo m, where (t, u) = 1, 
then ab — tu(m). 

To prove this, assume (ab)” = 1 (mod m). Thenl = (ab)” = 
(ab) = a”'b” = 6b”. Hence, by Theorem 21, wt, and con- 
sequently w, is a multiple of wu. In a similar way we find that w 
is a multiple of ¢ also, or, since (¢, uw) = 1, w is a multiple of tu. 
Now (ab)™ = ab’ = 1. Hence tu itself is the least value of w 
for which (ab)” = 1 (mod m). Therefore ab — tu. 

In preparation for the next theorem we prove the 


Lemma. If one number a belongs to the exponent t modulo p, a 
prime, then o(t) ancongruent numbers belong to t modulo p. 

All numbers which belong to ¢ are roots of the congruence (1) 
xz’ = 1(mod p). By the Corollary to Theorem 21, ¢ is a divisor of 
p — 1, and hence by Theorem 20 there are just ¢ roots of this 
congruence. 

By hypothesis a—t. The numbers a, a’, a’, ---, a‘, all of 
which satisfy (1), are incongruent modulo p. For if a* =a’ 
(mod p), where 0 <r<s<t, then a® ” =1 (mod p), where 
s—r<t, which is impossible. Therefore these t powers of a 
include all possible numbers which may belong to ¢ modulo p. 

We now determine the values of 7 for which a’—>t. Assume 
a‘—r. Then (a')” =a” =1. But(a’)'=1. Hencer St. By 
Theorem 21 zr is divisible by é. 

First we assume (2, ¢) = 1, in which case r is divisible by ¢. 
Hence r = 7. 

But if (7, f) = 6 > 1, with 7 = 2’6, ¢t = ¢’6, then 


(a*)* — gio’ — (a*)é =] 
Hence r S t’ < t, and a’* belongs to an exponent <¢. 
Then, since r, the exponent to which a’ belongs, =¢ when 


(i, t) = land <t when (i, t) = 6 > 1, it follows that a’ > t when 
and only when (2,4) = 1. Hence the lemma. 


THEOREM 23. If tisa divisor of p — 1, there are o(t) incongru- 
ent numbers modulo p which belong to t as an exponent. 
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Let ¢; represent the divisors of p — 1 as 7 takes the values 
1, 2, a) v(p =< 1). 

Let y(t;) be the number of integers 1, 2, 3, ---, (9 — 1) which 
belong to t;. By the above lemma y(t;) = either ¢(¢;) or 0. 

By the Corollary to Theorem 21 each of the integers 1, 2, ---, 
p — 1 belongs to some one of the t;. Hence 


Z(t) =p—1 
But we also know by Exercise 4, page 13, that 
2 oti) =p—1 
Therefore x (ti) = 2 (ti) 


which is possible only when y(¢;) = @(¢,) for all values of 2. Hence 
the theorem. 
34. Primitive roots. Ifthe number to which a belongs modulo 
m is $(m), then ais called a primitive root of m. In particular, by 
the theorem just proved a prime =p has ¢(p — 1) primitive roots. 
For example, from the above table for modulus 13, the primitive 
roots of 13 are seen to be 2, 6, —6, —2. There are (12) = 4 of them. 


EXERCISES VIII 


1. Find illustrations of Theorems 21, 22, and 23 in the table of power 
residues for the modulus 13. 

2. Do the same for modulus 19. 

3. Do the same for modulus 29. 

4. Illustrate the lemma preceding Theorem 23 from one of the tables of 
power residues. 

Then solve the problem: Given that 15 — 10(31), find all values of z 
such that x — 10(31). 

5. Given that 30-2, 5-3, and 2—5 modulo 31, find numbers 
belonging respectively to the exponents 6, 10, 15, and 30. Find all the 
primitive roots of 31. 

6. Determine a primitive root of 109. 

7. Prove that the numbers which belong to any given exponent ¢ > 2 
modulo p > 3 occur in pairs such that the product of the numbers of a pair is 
congruent to 1 modulo p. 

8. Prove that if a — t(p), then a* = a! (mod p), if and only if k —1 =0 
(mod 2). 

9. Find the exponents to which 10 belongs modulo 7, modulo 23, and 
modulo 27. Change 4, 3, 3's, o°5, ay to circulating decimals. 

10. Prove that if p is a prime distinct from 2 and 5, and if 0 <a < p, the 
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a 
fraction — can be expressed as a pure circulating decimal, and the number of 
Pp 


digits in the period is the exponent to which 10 belongs modulo p. 

11. Prove that if l is the least exponent for which for some value of k 
a!’ = b* (mod m), where a and b are each prime to m, then whenever a” = b? 
(mod m) it follows that n = 0 (modl). Find an illustration of this proposition 
in one of the tables of power residues. 

12. Prove that if a = b (mod p*), then a?® = b?° (mod p*t*). Suggestion: 
Change the congruence to an equation, raise to the pth power by the binomial 
theorem, and use induction on s. This proposition will be useful in some of 
the discussions to follow. 


t 
13. Show that, if a —¢t(p), then a” = (p), where d = (u, f). 


—1 
14. Show that, if a — a (p), where p is a prime of the form 4n — 1, 


then —a is a primitive root of p. 

How can this be used in part of the computation of Exercise 5 above? 

15. Show that p — 1 occurs as a power residue of 6 modulo p if, and only 
if, the exponent to which b belongs is even. 

16. If a — t(p), show that the product of a complete set of power residues 
of a is congruent to —1 or 1 modulo p, according as ¢ is even or odd. 

17. Show that the proposition of Exercise 16 affords another proof of 
Wilson’s theorem. 


35. Numbers having primitive roots. From Theorem 23 it 
follows that a prime p has ¢(p — 1) primitive roots. We will now 
determine which of the composite integers have primitive roots. 

k 


Let m = II m,, in which the m; are powers of distinct primes, 
1 
and assume that there are as many as two of the m; greater than 2. 
k 
Now ¢(m) = II ¢(m,), in which each ¢(m;) for m; > 2 is even. 
1 


Hence the l.c.m. of the ¢(m,) is M < ¢(m). 

Now let a be any integer prime to m, whence a” = 1 (mod m,) 
for all values of 7. Hencea” =1(modm). Andsince M < ¢(m) 
it follows that m has no primitive root. 

Examples of integers which therefore do not have primitive 
roots are 15 = 3-5, 30 = 2-3-5, 12 = 4-3, and 45 = 37-5. 

The forms of integers remaining to be considered are 2”, p”, 
and 2p”, where p is an odd prime. 

First we examine 2”. This has primitive roots for n = 1 and 
n = 2, since 1 may be considered a primitive root of 2, and 3 is a 
primitive root of 4. But we find by the following argument that 
for n > 2, 2” has no primitive roots. 
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Any possible primitive root a of 2” must be odd. Then 
a” = 1+ 8b =1(mod 23). (See Exercise 6, page 3.) Apply- 
ing Exercise 12 above, we have (a2)2” = a2”. =1 (mod 2”). 
But 2"~? < 2"! = ¢(2"). Hence 2", for n > 2, has no primitive 
root. 

We will now show that integers of the form p", p an odd prime, 
have primitive roots. Let g be a primitive root of p. Then 


(1) (g + pt)?—* = 1 (mod p) 

for all values of t. First we seek a value of ¢ such that 
(2) (g + pt)?" # 1 (mod p’) 

or (g + pt)? — (g + pl) # 0 (mod p”) 


for unless (2) is satisfied g + pt cannot be a primitive root of p’. 
By the binomial theorem this becomes 


g? + p°H, — g — pt # 0 (mod p”) 
or g? — g — pt ¥ 0 (mod p”) 
But g? — g = 0 (mod p) or g? —g = hp. Hence 
hp — pt = p(h — t) ¥ 0 (mod p”) 


when and only when h — t #0 (mod p). That is, we require a 
value of ¢ satisfying this linear incongruence. Clearly there are 
p — 1 such. 

We assume any such value of ¢, put g + pt = 7, and will show 
that ris a primitive root of p”. From (1) and (2) r?~! = 1 (mod p) 
and r?—! # 1 (mod p”). Hence 


(3) r?-! =1+kp, where k #0 (mod p:) 
Now, since by the binomial theorem 
(1 + kp)? = 1+ kp? + Hop 
we have 
(4) (1 + kp)? = 1+ kp? (mod p*) 


Applying the proposition of Exercise 12 above to (4) with s=n—3, 
n > 2, we get 


(5) (1 + kp)?” = (1 + kp?)?” (mod p”) 
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By the binomial theorem again we have 


(1 + kp?)?”* = 1 + kp") + Hap"! = 14+ kp™ (mod p”) 
Using this in (5) 


(1 + kp)?” = 1+ kp" (mod p”) 
By (3) this becomes 


—_1)nn—2 
yP 1)p 


= 1+ kp" (mod p”) 
Since k # 0 (mod p), we have 
(6) ppp"? =e 1 (mod p”) 


which by (2) is also true for n = 2. 

Now let r — e(p”). Then eis a divisor of ¢(p”) = p™ }(p — 1). 
But, since r° = 1 (mod p=”), then also 7° = 1 (mod p), and eis a 
multiple of p — 1. Hence e is of the form p“(p — 1). From (6) 
it appears thatu >n— 2. AlsouSn-—1. Henceu = n— 1, 
e= p” !(p — 1), andr = g + pt is a primitive root of p”. 

Integers of the form 2p” remain to be considered. Let g be a 
primitive root of p”, and assume first that gis odd. Then g° — 1 
is divisible alike by p” and 2p”. Also ¢(2p”) = ¢(p"). Hence g 
is a primitive root of 2p”. If g is even we replace it by g + p” 
which is odd and by the same argument g + p” is a primitive root 
of 2p”. 

The results of our discussion of numbers which have primitive 
roots are stated in 


THEOREM 24. An integer m has primitive roots if and only if 
itis 2, 4, p®, or 2p”, where p zs an odd prime. If gis a primitive 
root of p, and (g + tp)?~! # 1 (mad p”), then g + tp is a primitive 
root of p?. 

EXERCISES IX 


1. Show that the condition g?—! = 1 (mod p’) is necessary for g, a primitive 
root of p, to be also a primitive root of p”. 

Suggestion: Assume g?~! = 1 (mod p’) and use Exercises VIII, 12, to show 
that as a consequence g would not be a primitive root of p”. 

2. Show that, if g is a primitive root of p”, it is also a primitive root of p. 

3. Show that there are (p — 1)¢(p — 1) primitive roots of p” incongruent 
modulo p?. 

4. Prove by the use of Exercises 1, 2, and 3 that there are just ¢[¢(p”)] 
primitive roots of p”. 
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5. Prove the same result independently by means of powers of one primi- 
tive root. 

6. Prove that there is the same number of primitive roots of 2p” as of p”. 

7. Find all the primitive roots of 49, expressing them as powers of one of 
their own number. 

8. Do the same for 54. 

9. Find a primitive root of 115. 


36. Indices. We have seen that the powers of a primitive 
root g of a prime =p form a reduced residue system modulo p. Thus 
any integer c prime to p: is associated with a certain index 7 of the 
power to which g is raised to produce c, or a number congruent to 
it, modulo p. Thatis, g’ = c (mod 7p), and, in a manner analogous 
to logarithms, 7 is called the index of c to the base g. ‘This is 
written 2 = ind, c, or 7 = ind c when it is unnecessary to indicate 
the base. 

The numbers c are arranged in number classes modulo p but 
their indices are taken inodulo p — 1. For if g* = g’ (mod p), or 
gi—® = 1 (mod p), then 7, — 72 = 0 (mod p — 1) (Exercises VIII, 
8). It is readily shown that the indices obey the laws stated in: 


THEOREM 25A. The index of the product of two numbers is 
congruent modulo p — 1 to the sum of the indices of the numbers. 
For, if g!' = c, and g* = Co, then 


g?! +g — gite | Ci "Co 
This is readily extended to the product of any number of factors. 
THEOREM 25B. The index of the nth power of a number is 


congruent modulo p — 1 ton times the index of the number. 
nr 


For if g* = c, then (g')” = g”* = c”. 
To illustrate from the power residues of 2 modulus 29: 
(1) 27-23 = 21.920 = 235 = 97 = 12 (mod 29) 
Using indices the statement may be written thus: 
Let x = 27-23 (mod 29) 
indg x = Indg 27 + inde 23 (mod 28) 
15 + 20 = 7 (mod 28) 
x = 12 (mod 29) 
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(2) Find x = 10° (mod 29) 
6 ind 10 (mod 28) 
= 6-23 = 26 (mod 28) 


“. x = 22 (mod 29) 


ind x 


37. Application to congruences. The indices find ready appli- 
cation in the solution of certain types of congruences when a table 
is available for the modulus of the congruence. 

To solve the linear congruence 


ax = b (mod p:p) p a prime 
we write ind a + ind x = ind b (mod p — 1) 
or ind x = ind b — inda (mod p — 1) 


and the value of z may be read from the table. 
To illustrate, solve 
182 = 25 (mod 29) 


indy 18 + inde x = ind2 25 (mod 28) 
indg x = 16 — 11 = 5 (mod 28) 


. £ = 3 (mod 29) 
We now discuss the solution of the bunomial congruence. 
(1) x” = c (mod p) p a prime 
By indices we have 
(2) nind x = ind c (mod p — 1) 


which is solvable if and only if d = (n, p — 1) dividesindc. This 
is the condition therefore for the solvability of (1). This condition 
being satisfied, there are d roots. Hence we conclude that (1) 
has the maximum number n of roots when and only when n divides 
both p — land ind c (t.e.,d = n). 


EXERCISES X 
Solve the congruences: 
1. z!° = 6 (mod 19). 2. x9 = 8 (mod 19). 3. x® = 11 (mod 19). 
4. Make a table of indices for the prime 101 to the base 2. 


5. Find two consecutive integers in this table such that their indices 
differ by 4. 
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6. Prove that there is one and only one value of x for which ind (x + 1) 
— ind x = d (mod p — 1), where d #* 0 (mod p — 1). 
By the use of indices solve the congruences: 


7. 51x = 88 (mod 101). 11. x’ = 48 (mod 101). 
8. 522 = 96 (mod 101). 12. (x — 3)4 = 5 (mod 101). 
9. 25 = 41 (mod 101). 13. x? + 102 + 5 = 0 (mod 101). 


10. x!’ = 75 (mod 101). 


38. The congruence x” = c (mod p’). In order to discuss the 
solutions of the congruence xz” = c (mod p*), where p is an odd prime 
which does not divide n or c, we extend the theory of indices to 
include moduli of the form p*. Let g be a primitive root of p’, 
and consequently of p also. Then the numbers g, g’, g°, ---, 
g’,---,g” '®—» form a reduced residue system, modulo p*. The 
exponents, or indices, of the system may be arranged in cycles 
modulo p — 1 by putting them in the form k(p — 1) + 7. In this 
form 7 takes the values 1, 2, 3, - - -, p — 1 and k successively is 
es ee ae es & 

Two numbers of the system belong to the same number class 
modulo p if and only if their indices differ by multiples of p — 1. 
For since g is a primitive root of p, g = g” (mod 7p) if and only if 
l, = l,(mod p — 1). (See Exercise 8, Section 34.) 

The solution of the congruence x” = c (mod p*) could be effected 
directly by means of a table of indices modulo p’, but such is not 
easily available. The following theorem relating its roots to those 
of the congruence x” = c (mod >p) is of importance. 


THEOREM 26. The congruences (1) x" =c (mod p*) and (2) 
x" = c (mod p), where p ts an odd prime that does not divide n or e, 
have the same number of solutions; and the solutions of (1) are con- 
gruent modulo p respectively to the solutions of (2). 

First we show the number of solutions to be the same. Put 


¢ = g*?-)T* and (1) becomes 
y= gh(P—) +i (mod p*) 
Then 
(3) nind x = k(p — 1) +7 (mod p*1(p — 1)) 


Since p does not divide n, the g.c.d. of the modulus of (3) and n 
is (p — 1,n) =d. Therefore (1) has d solutions or none according 
as d does or does not divide 7. 
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Similarly, putting the value of c = g*®—))+* in (2), we have 
ye" = gh(P—l) +s — g* (mod Dp) 
Then nind xs = 72 (mod p — 1) 


from which we see that (2) has just d = (n, p — 1) solutions or 
none according as d does or does not divide 1. 

To prove the second part of the theorem we notice first that 
each solution of (1) is congruent modulo p:p to a solution of (2). 
For if xj — c = 0 (mod p’), then z] — c = 0 (mod p). 

Moreover, no two solutions of (1) can differ by a multiple of p. 
For let x; and r2 be two solutions of (1), thus implying that d > 1. 
Then putting them in (3) and subtracting results we have 


n(ind x; — ind x2) = 0 (mod p*!(p — 1)) 
Or, since (n, p) = land (n,p —l) =d 


— ] 
ind 2; — indz2 = 0 (mod p>! 2—t) 


Then the difference between the indices of x; and 22 is divisible 
by p®!, but not by p — 1. For, if it were divisible also by p — 1, 
we would have 


ind x, — ind zz = 0 (mod p*~}(p — 1)) 
and <1 — 2 = 0 (mod p”’) 


That is, x; and x2 would not be distinct roots of (1). 
Hence, since these indices cannot differ by a multiple of p — 1, 
2, and x2 cannot differ by a multiple of p. 

Consequently the correspondence between the roots of (1) and 
(2) referred to above is one to one. 

In terms of number classes, each solution of (1) is a subclass of 
the corresponding solution of (2). 


Example. Find the solutions of (1) z? = 2 (mod 7°). The 
solutions of 27 = 2 (mod 7) are x =+3. Find now solutions of 
(2) x? = 2 (mod 7”) by putting z =34+ 7t. Then 9+6-7t + 
77t? = 2 (mod 7”);i.e.,9 — 2 + 6-7t = 0 (mod 7”) or 1 + 6 = 0 
(mod 7) andt=1. Then sc =3+7 = 10 is a solution of (2). 
Then put x = 10 + 7%t, in (1), and by similar method get z = 108. 
If we start with x = —3 + 7t, we are led to the second solution 
x = —108. 
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EXERCISES XI 


Find the solutions of the congruences: 
1. z* = 5 (mod 11%). 2. x? = 6 (mod 113). 3. 2? = 2 (mod 11%). 


39. Residues of given order. We now give special attention to 
the number c in the congruence x” = c (mod q), g being any number 
which has primitive roots, and n fixed. 

THEOREM 27. The necessary and sufficient condition that the 
congruence (1) x" = c (mod q) shall be solvable is that (2) c*/¢4 = 1 
(mod q), where ¢ = $(q) and d = (a, ¢). 

Now (1) is equivalent to n ind x = ind c (mod @¢). 

The condition is necessary, for if (1) is solvable, then ind c = rd. 
That is, c = g", where g is a primitive root of g. Then 
ct/d = grae/a = g”® = 1 (mod q). 

The condition is also sufficient, for assume that c*/? = 1 (mod q) 
and let c=g’. Then c*? = g*/4=1. Hence 7 (= indo) is a 
multiple of d and therefore (1) is solvable. 

When x” = c (mod q) has a solution, c is said to be a power 
residue of q of the nth order, and otherwise a non-residue. Then c 
is an nic residue or non-residue of g according as c*/4 = 1 (mod q) 


bade ne d. 
or not. This is known as Euler’s Criterion. Now, since 7 is & 


divisor of ¢, (2) has just : solutions, and we state: 


THEOREM 28. The number of incongruent residues of the nth 
order modulo q 1s : , and these residues are the roots of the congruence 
x*/¢ = 1 (mod q). 


Example (a). For what values of c can x? =c (mod 7) be 
solved; that is, what are the quadratic (second-order) residues of 
6 
i Hews os 6 706) 2, and & = = = 3, Then 
there are three quadratic residues of 7, and they are the roots of 
the congruence c? = 1 (mod 7). These are 1, 2, and 4. 


Example (b). For what values of c can x? =c (mod 49) be 
solved? n= 3, = 42, d = (3, 42) = 8, e = 14. Thenc!* =1 


(mod 49). Since 3 is a primitive root of 49 (see Exercise 7, page 
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69), we have c = 33, 3°, 3°, ---, 334, .--, 34% which reduce modulo 
49 to 27, —6, —15, - - -, 1 respectively. 


Example (c). For what values of c can z° = c (mod 49) be 


solved? n= 5,6 = 42d = i = 42. Thenc*? = 1 (mod 49). 


Hence c may be any integer prime to 49. 


EXERCISES XII 


1. Find the cubic residues of 7. 

2. Find the quadratic residues of 11. 

3. Find the 7th order residues of 29. Check by the table of power 
residues modulo 29. 

4. Find the 9th order residues of 54. 

5. For what primes p is every number <p a cubic residue? What can 
you say about the cubic residues of other odd primes? 


6. Show that any odd prime p has just : quadratic residues (two 


solutions). 
7. Prove that if the congruence x” = 1 (mod p) has n roots then n is a 
divisor of p — 1 (a converse of Theorem 20). 


CuHaPTerR IV 
QUADRATIC RESIDUES 


40. Quadratic character. In the study of quadratic residues 
we shall meet some of the most beautiful results in the whole 
field of number theory. If in Theorem 28 of the last chapter 
the modulus is an odd prime p, and n = 2, the theorem states 
— 1 


—]1 
that there are just quadratic residues, and hence also 


quadratic non-residues, of p. By the preceding theorem we see 
that an integer c (prime to p) is a quarrauc residue or non-residue 
1 


of p according as ao id = 1 (mod p) orc oz #1 (mod p:p). But 
since for all values of c we have 
Vee. Ais Cr aes Sy ao meds) 
it follows that 
oe =1 or —1(modp) 


Dp 
Hencec 2. =— 1(mod p) is the necessary and sufficient condition 
that c be a quadratic non-residue of p. The reader should verify 
these statements from the tables of power residues. 

The case of an odd composite modulus m reduces immediately 
to that of the prime modulus because of Theorem 17, page 57, and 
Theorem 26, page 71, which taken together imply that c is a 
residue of odd m 1f and only rf ¢ 1s a residue of every prime factor of m. 
In our further discussions, when it can be done without ambiguity, 
we shall use the terms residue and non-residue as meaning quad- 
ratic residue and quadratic non-residue, and assume that p rep- 
resents an odd prime, unless otherwise described. The relationship 
of an integer c to p, as to whether it is a residue or non-residue 
of p, will be referred to as its quadratic character with respect to 
p and will be symbolized by (c| p) = lor —1, respectively. That 
is, (6|19)=1 means that 6 is a residue of 19, and (13|19) =— 
means that 13 is a non-residue of 19. This symbolic statement 
of quadratic character is due to Legendre. 
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Let c; and co be any two integers prime to p. Then 


p-l1 p—1 p-l1 


(cy:Co) 2 = cy 2 *co 2 =1 or —1(mod>p) 
according as c; and co are alike or unlike in their quadratic char- 
acter with respect to p. Hence we may state 


THEOREM 1. The product of two residues or of two non-residues 
1s a residue, and the product of a residue and a non-residue is a 
non-residue; or in symbols (a|p) (b|p) = (ab|p). 


EXERCISES I 
1. Show that —1 is a residue or a non-residue of p according as p = 
1 


at 
4n +1 or 4n — 1 [that is, (—1|p) = (-1) 2 J. 
2. Prove that —3 is a residue of p = 3n +1 and a non-residue of 
p = 3n—1. Suggestion: Use Theorem 20, Chapter III, and its converse 
with the congruence x? — 1 = (x — 1) (x? +2 +1) =0 (mod 2) 
3. Find the primes p = 12n + a, where 0 <a <6, of which 3 is a 
residue. 
4. Determine the values of c for which (c|13) = 1. 
p— 
5. Justify the congruence (clp) =c 2 (mod p). 
Evaluate: 
6. (3/31) (—1|31), (60/61) (58|61). 
7. (2|11) (5|11), (80]13) (12|138). 
Evaluate with the aid of tables of power residues: 
8. (11|19) (13|19) (5|19), (1320|19). 9. (198|29), (650|29). 
10. Determine the quadratic residues of g in terms of one of its primitive 
roots, where g is any number having primitive roots. 


41. The quadratic reciprocity law. We now seek to develop a 
more efficient method of determining the value of (c|p). Resolv- 
ing into prime factors, we have c = + 2%-pj{'-ps’---pz*, where 
the p; are odd primes. By Theorem 1 the value of (c\p) is known 
once we know the values of (—1|p), (2|p), (p:|p). In passing we 
note that we may, again by virtue of Theorem 1, replace each odd 
a; by 1, and each even a; by 0, without changing (c|p). The value 
of (—1|p) is already known from Exercise 1 above. To evaluate 
(p;|p) we employ the beautiful quadratic reciprocity law, which 
sets up a surprising relation between (q|p) and (plq) where p and 
q are odd primes. The law was discovered by Legendre, but was 
first proved by Gauss, who gave six different proofs for it. Gauss 
called this law ‘“‘the gem of the higher arithmetic.’”’ We shal} 
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follow Gauss’s third proof, also obtaining in the course of the 
argument the value of (2|p). The first step is to prove 


THEOREM 2 (The Lemma of Gauss). If q 1s any positive integer 
not divisible by the odd prime p, and if n denotes the number of least 
positive residues modulo p of the numbers 


(1) q, 2q, 3g, --*, 3(p — 1)q 
which exceed - then 
(2) (q\p) = (—1)” 


Obviously all numbers (1) are different from zero modulo p, 
and, as in Theorem 9, Chapter III, no two of them are congruent 
modulo p. 


Let a1, dg, ---, Gn be the residues of (1) > 7 and 6, be,---, by 
[k = 4(p — 1) — n] those which are < . 
Then the numbers p — a; are each > 0 and < - and also they 


are all different from the b;. For if p — a; = 6;, then p = a; + 
b; = aq+ bq = (a + Bg. But this is not true since (q, p) = 1 


and a and @# are each < 5 
Hence the h = 4(p — 1) numbers 
(3) Pp — 4, Pp — Ag, +++, P — An, by, bo, «++, By 


are the h positive integers < 5 Therefore 


n k 
TI (p — ay) -11 bj = [3p — 1]! = hi 


n k n k 
But II (p — a,)-1b; = (—1)" IL a; I b; (mod p) 
1 1 1 


1 
And by (1) 
n k 
(—1)" Ia; 1b; = (—1)" q’-h! (mod p) 
1 1 
Combining these results we have 
(—1)" g’-h! = A! (mod p) 
or (—1)” gq” = 1 (mod p) 


78 QUADRATIC RESIDUES 


and multiplying through by (—1)” 
q’ = (—1)" (mod p) 
Hence by Exercise 5 above 
(4) (qlp) = (—1)" 
We recall that in this result ¢ is any positive integer. 


Exercise. Take q = 11, p = 19, form the numbers used in 
the above argument, and check the result. 
The next step in the argument is to show that, when q is odd 
h 


1g ag 
( = (—1)”, where M = | and the symbol i means, 
qip) = (-1) > : 5 y 7 


tw=1 


as in Chapter I, the greatest integer in the quotient = 


Since 1q = p E + r;, where r; is the least positive residue 


of 7g modulo p, we have 
h 


Ye h p-| | ey 
I P 1 


1 


or Sy = x A ry +, 
I i 1 1 
h 


_ p-~1_pi-l 
But Qa l+24 +e =F 
Then putting = Pf, a; = A, b= 8B 
8 I I 
we have qQP =pM+A+8B 


Also adding the numbers (3) we have 
P=np-—-A+B 

By subtraction 

(5) P(q— 1) = p(M — n) + 2A 


Now, assuming gq to be odd, it follows that M — n is even or 
M = n(mod 2). Hence from (4) we have 


(6) (q\p) = (—1)" 
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Now, if we assume q to be an odd prime, p and q can be inter- 
changed in the foregoing argument with the result that 


(7) (plg) = (-1)" 


—] 
where N= > E J and a |= 


Then multiplying the corresponding members of (6) and (7) 
we have 


(8) (pla) (qip) = (—)™t* 


Our next step then is to show that 


—1lq-1 
N=h- a ee ete 
M + l , 5 


We are led to this result by the following computation of the value 
of M, in which we assume q < p without loss of generality. Recall 
that by definition 


w= [2] +7] +--+[#]+--+[*] 


Since q < p, the first term in this series of integers is zero and each 
term is either equal to the preceding or is one unit greater. We 
first find the value of 2 such that 


Bee and [e+ dal 
p p 


Since i + 1 < pand q < p, neither of these fractions is an integer. 


Then . ; 
1 
1 ge Oe )q 
P 
t 
or (<a nal 


t 
Hence 2 = bi is the number of the last term having the 


— 1)p 


t 
valuei— 1. Likewise | is the number of the last term 


t t — 
having the value t — 2. Then | — [ta ve ; ve is the number 
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of terms having the value? — 1. In this way M may be shown as 


the sum of the products of each integer occurring in the series by 
the number of times it occurs. The last term of the series is 


h ; 
Ed! Putting in the value of h and noting that p — q < 2p, 
p 


[e— Ua _ fer ete— a) lady eg] ed 
p 2p = 2p 2 


l 
The number of the last term having the value 1 — 1 is 7 = | 


l 
Thus there are h — || terms at the end of the series each having 


the value |. Hence 


wo -P2]} (HED) HE] 
(2)-[S ob) 
=) (8)- (8) 


Or M+ N = Al, and putting this result in (8) we can state the 
quadratic reciprocity law: 


$e $=) 


THEeorEM 3. If p and q are pow odd primes (p|q) (q|p) = 


= a4 
(—1)"!, where hh = : , and] = ar 


We note that h and / are even or odd according as the corre- 
sponding primes p and q are of the form 4n+ 1 or 4n— 1. If 
either is even, the product of the Legendre symbols is +1. That 
is, of either p or q ts of the form 4n + 1, (plq) = (q|p); but, if both 
are of the form 4n — 1, (plq) = — (q|p). 

The importance of these results in determining the quadratic 
character of one odd prime with respect to another is readily seen. 
For example, to determine whether 5 is a residue of 3 we write 
(5|31) = (31/5) since 5 is of the form 4n+ 1. In the latter 
symbol 5 is the modulus. Hence (31/5) = (1/5) = 1. Or to 
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determine the quadratic character of 31 with respect to 83, 
(31/83) = — (83]31) = — (21/81) = — (8/31) (7/31) = — (1[3) (]7) 
Sa) al) ek 

It remains for us to find a method of determining the quadratic 
character of the even prime 2 with respect to an odd prime. When 
q = 2, (4) becomes (2|p) = (—1)". Also M = 0 and (5) becomes 
P=—pn+2A. Hence P=n (mod 2), and (2|p) = (—1)’, 
pe —1 

8 


where P = 


EXERCISES II 


1. Show that 2 is a residue of all primes of the form 8n + 1 and a non- 
residue of all others. 


Determine the following quadratic characters: 
2. (15|67). 3. (22/101). 4. (182|271). 5. (969|1013). 


6. If 12n + 6 is a prime, use the reciprocity law to find for what values 
of b (3|12n + b) = (12n + b\3) = (6/3). Similarly, for what values of b is 
(3|12n + b) = — (12n + b|3) = — (6/3)? Thus determine which forms 
12n + b represent primes having 3 as a residue, and which represent primes 
having 3 as a non-residue. 

7. Determine values of b so that the forms 10n + b will represent all 
primes of which 5 is a residue. 

8. Determine values of b so that the forms 44n + 6 will represent all 
primes of which 11 is a residue. 

9. Determine values of b so that the forms 20n + b will represent all 
primes of which —65 is a residue. 

10. Show that the product of the quadratic residues of a prime p is =1 or 
—1 modulo p according as p = 4n — 1 or 4n +1. Suggestion: Recall that 
the even powers of a primitive root of p are the residues of p. 

11. If p is a prime 4n — 1, and if m is the number of positive quadratic 
non-residues < 5 then [3(p — 1)]! = (—1)™ (mod p) 

12. Show that any quadratic residue of an odd prime p is a quadratic 
residue of p”. 


13. Consider the graph of the line y = 2 x, and the rectangle formed by 
P 


the lines x = 0, y = 0, x = 5, and y = 5, of which y = {2 is a diagonal. 
P 


By counting the points within the rectangle whose coordinates are integers, 
show that 
p—-1lq-—1 


MENS, 
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42. Jacobi symbol. In the Legendre symbol the modulus is 
an odd prime, which is a necessary condition for the symbol to be 
interpreted as quadratic character. We now introduce the Jacobi 
symbol, which has the same form, but in which the modulus may 
be compusite. Consequently when the modulus is composite this 
symbol is not to be interpreted simply as quadratic character, 
although at times it is identical with the Legendre symbol. 

Let P be any positive odd integer. Then either P = 1 or 

k 


P = II p;, where the p; are odd primes not necessarily distinct. 
1 


Let n be any integer prime to P. Then we define 
(9) = (m1) = 1, and (n|P) = (n[pi) (n|pe) «+ (mlpe) 


That this should not be interpreted simply as quadratic char- 
acter is evident when we note that if an even number of the symbols 
(n|p;) were negative their product would be positive, whereas if 
n were a residue of P it would necessarily be a residue of each p; 
and all symbols (n|p;) would be positive. So, when the Jacobi 
symbol has the value +1, 7 is not necessarily a quadratic residue 
of P. But when the Jacobi symbol has the value —1, n must be 
a non-residue of P. 


THeEoREM 4. If n 7s relatively prime to the positive odd integers 
P and Q then 


(10) (n|P) (n|Q) = (n|PQ) 
k 1 
This follows at once from (9) if we put P = II p; and Q = II q. 
1 1 


For 
(n|PQ) = (n|pi1) «++ (n\pe) (nlar) +++ (rlaz) 


= (n|P) (n|Q) 


THEOREM 5. If m and n are each prime to the positive odd 
anteger P, then 


(11) (m|P) (n|P) = (mn|P) 
For by (9) 


(m|P) (n|P) = (mpi) --- (mipe) (n|pi) «+ (ripe) 


JACOBI SYMBOL 83 
Then by Theorem 1 (since these moduli are odd primes the 
symbols are also of the Legendre type) this product becomes 
(mn|pi) --- (mn|pe) = (mn|P) 


THEOREM 6. If nis prime to the positive odd integer P, and if 
n = m (mod P), then 


(12) (n|P) = (m|P) 


For, since n = m (mod P), we have n = m (mod p,) for all 
values of 7. Then by definition of the Legendre symbol 


(n\pi) = (m\p,) 
Hence we can write 


(n|P) = (n|pi) «++ (n\pe) = (m|pi) «++ (mipy) = (m|P) 
THEOREM 7. If P 1s a positive odd integer, 


(13) (—1|P) = (—1)3? 


By definition (—1|P) 


k 
II (—1\p;), which by Exercises I, 1, 
1 


k 
23 (Pi- 1) 


(—1) 


k k 
Now we may write P = II p; = {1+ (p;— 1]. And when 
1 1 


k 
this product is expanded all the terms except 1 +>) (p; -— 1) 
I 


are multiples of 4. Hence 


k 
P=1 +>) (pe - 1) (mod 4) 
i 


k 

or P-1 =)) (p; — 1) (mod 4) 
1 
k 

and 3(P — 1) =)» 4(p; — 1) (mod 2) 


1 


Then using this result in the above we have 


k 
> $(p-1) 4(P—1) 
(—1|P) = (-1)! = (—1) 
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THEOREM 8. If P 1s a positive odd integer, 
(14) CI al oa aaa 


By the paragraph preceding Exercises II, (2|\p) = (—1)8’-Y 
when p= is an odd prime. Hence 
rE 
z 3(pg-1) 


k 
(2|P) = (2\p;) = (—1) 


We may write 
k k 


P= Wp; = U[L + @ — DI 


Since p? — 1 = 0 (mod 8), when this product is expanded all 
terms containing as many as two of the factors D; — 1 will be 
multiples of 64. Hence we have 


k 
P? =1+)- (p?—1) (mod 64) 
1 


k 
or P-le= 4(p?—1) (mod 8) 
du 
Then using this in the above, we have 
Ek 2 —1) 
(2|P) = (-Ire = (-1kern 


THEOREM 9. If P and Q are positive, odd, and relatively prime 
antegers, then 


(15) (P|Q) (Q|P) = (—1)8P-»-He-» 
By definition of Jacobi’s symbol 
l k 
(P|Q) (Q|P) = It (P|q,) el (QIp:;) 
Then by Theorem 1 this can be written 


II (pilq;)-T (lpi) or IL (pilg;) (alp;) 


in which each product is taken for 7 = 1, 2, ---, k and for 7 = 1 
ree 
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But by Theorem 3 


k | 
. ZL $(p—-1)-4(@j-Y 
II (pilq;) (q|ps) = (—1)s- 242 


zk 3 
3(pi—1)-E 3(qj—-1 
a (—1)1 (p ae (qj —-1) 
and, as shown in the argument for Theorem 7, this exponent is 
= 4(P — 1)-3(Q — 1) (mod 2). Therefore 


(P|Q) (Q\P) = (—1)2P-) 2@-v 


We now note that the statements of Theorems 5 to 9 inclusive 
are identical in form with the corresponding statements involving 
Legendre’s symbol. That is, the two kinds of symbols are identical 
in form, and the laws of operation with them are the same. We 
may therefore regard the Jacobi symbol and its operations as 
an algorithm by means of which the positive or negative character 
of a given symbol is computed. Then, if the first symbol in a 
chain of operations is also a Legendre symbol, the result may be 
interpreted as quadratic character. 

We illustrate by finding the positive or negative character of 
(365| 1847). 


(365|1847) 


(1847|365) = (22|365) = (2/365) (11/365) 
—1-(365|11) =— 1-(2|11) =—1--1=1 


The reader should note the justification for each step taken. 
The given symbol then has the value +1. Since 1847 is a prime 
this may be stated in terms of quadratic character, although 
Jacobi symbols were used in the course of the computation. 
That is, 365 is a quadratic residue of 1847. 


EXERCISES II 


Evaluate both with and without the use of Jacobi symbols (the moduli 
are primes): 

1. (195|1901). 2. (182|1831). 

3. Show that (6|P) = 1 if P = +1, or +5 (mod 24), and = —1 if 
P = +7, or +11 (mod 24). 

4. If P and Q are as given in Theorem 9, and 2P > Q, show that 


(+ PIQ) = (-1)??-.(4Pl2P — Q) 
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43. General quadratic congruence. The general congruence 
of the second degree in one variable may be written 
ax? + br + c = 0 (mod m) 


in which m is composite. By Chapter III its solution may be 
made to depend upon the solution of a system of congruences with 
prime moduli. Hence we shall confine our discussion to the con- 
gruence 


(1) ax? + bx + c = 0 (mod p) 


where p is an odd prime and does not dividea. If 21s the modulus, 
the solutions (when they exist) are readily found by inspection. 

If a = 1 (mod p=) we multiply through the congruence by a 
where aa = 1 (mod p), getting 


(2) x? + bax + ca = 0 (mod p:p) 


When ba is even we complete the square of the left member by 
writing 


ba\? ba? 
8) (2+) =p 
b7a2 


In general, (3) has two roots or none according as Ngee 
22 
is or is not a quadratic residue of p. However, if a ca = 0 
(mod p), (3) becomes 
ba\? 
z+ S = 0 (mod p) 
ba 


which has just the one root xz = — = 


If ba in (2) is odd it may be made even by adding to it either 
p or —D. 
Example 1. Solve 52? — 152 + 14 = 0 (mod 17). 
Sa =1 if a=T7 


Then zve+i14r7 -4=0 
or (x + 7)? = 2, which isa residue of 17 
We find t+7=3+6 


and =—1 or 4 
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Example 2. Solve 7x? + 52 — 10 = 0(mod 29). 


If Ta =1, a=-4 
Then 2? — 207 + 11 =0 
or (x — 10)? =2 
But (2/29) = — 1, and no solution exists. 


EXERCISES IV 
Find all the solutions of: 
1. 522 — llr —12 =0 (mod 161). 3. x? + 292 — 40 = 0 (mod 91). 
2.27 +2 +1 =0 (mod 38). 4. 40x? + 27x — 2 = 0 (mod 143): 


44. Factoring by means of residues. The use of quadratic 
residues as an aid in factoring numbers depends directly upon the 
fact that if R is a quadratic residue of m then it is also a residue of 
each of the prime factors of m. Then, if we know that R is a 
residue of m, and know also the linear forms for the primes of which 
R can be a residue, we know linear forms to which the prime factors 
of m belong. 

For example, if we have given that 3 and 5 are quadratic 
residues of 4189, and recall that primes having 3 aS a residue belong 
to the forms 12n + 1, and those having 5 as a residue belong to 
the forms 10n + 1, we know that any prime factors which 4189 
may have belong to both sets of forms. The primes < 7/4189 
satisfying this condition are 11, 59, and 61. By trial, 59 is found 
to be a factor of 4189, and 4189 = 59-71. 

This presupposes that we are able to find residues of the 
number to be ao For this purpose we recall the equation 
Qn41 = ae from the bottom of page 31. Writing this in the 
form Po = D — QrQn41 we see that —Q,Qn41 is a quadratic 
residue of D. Then if +/D is expanded into a continued fraction, 
—Q:Q2 = — Qe is a residue of D (since Q; = 1). Since —Q2Q3 
is also a residue, Qs is a residue. Continuing this with each suc- 
cessive Q,Qn+1 we secure, as residues of D, —Q4, Qs, and in general 
—Qoi, and Qei41. 

To illustrate we find residues of 4189 factored above. The 
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expansion of 1/4189 gives the following elements of the continued 
fraction: 


From these values of Q;, residues are found. 5isaresidue from 
Qo = 20, 3 from Q7 = 75, —11 from Qg = 11, ete. 

The usefulness of this method of factoring numbers obviously 
depends upon knowing the forms of primes of which given numbers 
are residues. Or better yet would be a list of such primes instead 
of the forms to which they belong. Such lists have been prepared 
by D. N. Lehmer and published by the Carnegie Institution in the 
form of factor stencils. The stencils are sheets of paper on each of 
which are listed all primes S 47,493. Then for a given residue 
R (containing no square factor) a sheet is prepared to show the 
primes of which & is a residue by punching holes at the positions 
occupied by such primes. These sheets are prepared for both the 
positive and negative residues for values of R up to 238. Then, 
when a few residues of a number D are known, their stencils are 
superimposed upon each other. Primes having all these residues 
will be revealed by holes showing through all the stencils. This 
gives a list of primes among which any existing prime factors of 
PD will be found. 

EXERCISES V 

Find the prime factors of: 

1. 1633. 2. 3337. 


Find residues suitable for use with the stencils in factoring: 
3. 27,641. 4. 226,801. 


CHAPTER V 
DIOPHANTINE EQUATIONS 


Although the study of indeterminate equations and their 
3olution in integers has had a very important place in the develop- 
ment of number theory, there is not a well-unified body of knowl- 
edge based upon general methods. We have already solved the 
equation ax + by + c = 0 in integers by means of the Euclidean 
algorithm, and again by the use of continued fractions. Also 
incidental to the latter subject the equation 2? — Dy? = N was 
discussed with particular reference to certain values of N. In this 
chapter we will not attempt more than a brief introduction to a few 
of the more common indeterminate equations and methods of 
solving them in integers. 

45. Simultaneous linear equations. The solution of the linear 
equation in two variables finds direct application in the solution 
in integers of two simultaneous linear equations in three variables. 
Such a linear system is 


ayx + byy + cyz +d, = 0 


(1) 
Aox + bey + coz + dz = 0 


It is easily seen that even a single equation of this type may 
have no solution in integers. Sucha one is 2x — 10y + 42+ 5 = 0. 
For since 2 divides each of the coefficients of z, y, and zit must also 
divide the constant term if the equation is to be satisfied in integers. 
Also we may have two equations of this type each of which has 
solutions in integers but taken simultaneously they have no integral 
solution. For example, 


197 + 10y + 7z2+3=0 
5a + 2y + 2z2+1=0 


x= 10, y =— 20, z = 1 is a solution of the first, and xz = 1, 
y =— 4,z = 1 asolution of the second. But no integral solution 
89 
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exists for them taken together. For, eliminating z, we get 

3z + 6y — 1 = 0, which has no solution in integers, as it would 

necessarily have if the given equations had a common solution. 
Eliminating one variable, say z, from (1), we get 


(ayCg — agcy)x + (bycz — becy)y — (cyd2 — ced) = 0 
which we write more simply as 
(2) (ac)x + (be)y — (cd) = 0 


In order for (1) to have a solution in integers it is necessary that 
the g.c.d. of (ac) and (bc) should be a divisor of (cd). This is in 
addition to the necessary conditions that in each equation of (1) 
the g.c.d. of the coefficients of z, y, and z must divide the constant 


term. 
Let 71, Y1, 21 be a solution in integers of (1). Then these equa- 
tions may be written 


ay(z — 4%) + Oy (y — y1) tale — 2) = 0 
Ag(x — 01) + be(y — yx) + co(z — am) = 0 


If none of the numbers (bc), (ca), and (ab) is zero, (3) is equivalent to 


(3) 


Z—% YTYM FTA 


@) (een), GD) 


If, for example, (bc) = 0, then (4) is replaced by 


YN £74 


(ca) — (ab) 


(4’) L— t= 0, 


If two of the numbers (bc), (ca), and (ab) are zero, then all are 
zero, and either equations (1) are identical, or they have no common 
solution. 

It is of interest to note that equations (1) are the equations of 
planes, and that the various steps in the solution may be interpreted 
geometrically. 


Now let the value of the ratios in (4) or (4’) be - where (7, s) = 1. 
Then 
r r r 
w= xy + (be) -, y= t (ca) -, z= % + (ab) - 
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in which z, y, and z are integers when and only when sis a divisor 
of (bc), (ca), and (ab). Nowif gis the g.c.d. of (bc), (ca), and (ab), 


then : , where ¢ takes all integral values, positive, negative, and 
zero, oo all possible values of the ratio for which 2, y, and 
z are integers. Moreover, no two values of : can give the same 
solution. Hence when a particular solution ot (1) is found the 


general solution may be written 


t= 


or (cay (aby 
g g 


> YRHnrt ; 
g 


To illustrate, find the general solution of 
2x —y+3z2+10=0 
rsty—5z- 6=0 
Eliminating y by addition, we get 
3x — 22+4=0 


a solution of which is z = 2,z = 5. Putting these values in either 
of the first equations we get y = 29. We compute 


(bc) = byco — bocy = 2, (ca) = 13, (ab) = 3 
Then g = 1, and the general solution is 
r=2+2t, y=29+ 138i, 2z=5+4+ 3 


Solutions in positive integers are obtained for all values of t >— 1. 


EXERCISES I 


Find the general solution in integers, where such exists, and determine the 
number of positive integral solutions for: 


1 x2«+3y-—4z-— 8=0 2. llxz+ y — 62 = 0 
2x ++ y+3z — 39 = 0. —32 +2y+ z2-7=0. 
3.32 +6y —- 2+5=0 42-—- y+t5z2+ 


1 
44r+3y+7z—-4=0. ztby- 2z2+7 
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46. The equation x? + y? = 2”. 
satisfy the equation 


(5) i i 


and hence may represent the sides of a right triangle, have been of 
special interest to mathematicians since remote times. Pythagoras 
proved the existence of infinitely many such sets of integers, and 
they have continued to be of interest and importance in the theory 
of numbers since, sometimes being referred to as Pythagorean 
numbers. 

In the discussion of this and certain other Diophantine equa- 
tions a set of values of the variables satisfying the equation is said 
to form a primitive solution when the numbers of the set have 
no common divisor greater than unity. 

In seeking a general solution of (5) we first make the restriction 
that it be primitive. This implies that the three numbers are 
relatively prime in pairs, for any number which is a divisor of any 
two of them is necessarily a divisor of the third. Also, recalling 
that the square of an odd integer is of the form 8n + 1, we see 
that both z and y cannot be odd. For, if they were, we would have 
27 = 8k +2, making z? even but not divisible by 4, which is 
impossible. Hence one of x and y is even and the other is odd, and 
consequently z is odd. 

Assume x = 2a and 2? = 2? — y* = (2+ y) (z — y), in which 
z+y and z—y are both even. Put z+ y = 2u, z2— y = 2v. 
Then y=u—vandz=u+». Also x” = 4a? = 4uv, a? = w. 
Since (y, z) = 1, it follows that (u, v) = 1. Then we can put 


u =m", v = n*, where (m, n) = 1. Consequently 2? = 4m?n? 


andz =+2mn,y=u—v= m — n*,andz=ut+o =m? +n’. 

Hence all primitive solutions of (5) are represented by those 
forms where m and n are relatively prime and one of them is even. 
And, conversely, since 2m? = z + y, 2n? = z — y, and any com- 
mon prime divisor of y and z other than 2 would divide both m 
and n, then any relatively prime integers, m and n, one of them 
being even, give a primitive solution of (5). 

Then all positive integral solutions of (5) may be represented by 


x= 2kmn, y = k(m? — n’), z = k(m? + n?) 


Triples of integers which 


in which k is any positive integer and m and n are as described. 
It is clear that we may also impose the condition that m > n. 
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For any interchange of the values of m and n does not affect the 
numerical values of xz, y, and z, but simply changes the sign of y. 
Letting k = 1, a few of the primitive solutions are 


m n x y Z 
2 1 4 3 5 
3 2 12 5 13 
4 1 8 15 17 
4 3 24 7 25 
5) 2 20 21 29 
5) 4 40 9 41 


A second method of finding the Pythagorean numbers, in which 
we use geometrical concepts, is of interest. Since z cannot be zero, 
we write equation (5) in the form 

2 2 
L y 
+++5=1 and put 
z +r z? pu 
getting 


(6) w+y=1 


Therefore in order to find integral solutions of (5) we must find 
rational solutions of (6). Since (6) is the equation of a circle, this 
is equivalent to finding the rational points, that is, the points with 
rational coordinates, on the circle. Through the point P(—1, 0) 


draw a line of slope — whose equation will therefore be 
m 


(7) v= —(u +1) 
m 


This intersects the circle in a second point Q(u, v). Then it is clear 


that the slope of the line — is rational for any point Q 


v 
util 
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whose coordinates are rational. And conversely, we will now find 
u and v to be rational functions of mand n. Eliminating u between 
(6) and (7), we get 

mv? — 2mnv + n2v? = 0 


m ; 

from which v = m4 for the point Q. Correspondingly, 
ee 

“= a aes It follows that whenever the slope of the line is 
m n 


rational the coordinates of Q are rational. Thus a one-to-one 
correspondence is established between the lines of the pencil P 
having rational slopes and the rational points on the circle. We 
note in passing that infinitely many such lines exist within any 
angular interval about P and consequently infinitely many rational 
points exist on any interval of the circle. 
x 

Now putting u = - and v = ; , we have 

(8) ct m= —n? y 2mn 
z2 m+n?’ 2 m+n? 

Since (8) is thus derived from (5), and also (8) implies (5), as may 
be seen by squaring and adding the members of (8), it follows that 
(5) and (8) are equivalent. 

We may now write 


x = p(m*? — n?) 
y = 2pmn 
2 = p(m + n?) 
where p is a rational proportionality factor. Put p = =, where k 


and d are integers, and (k, d) = 1. Then for z, y, and z to be 
integers it is necessary that 


m? — n* = 0 (mod d) 
and m +- n* = 0 (mod a) 


It follows that 2m? = 0 (mod d), and 2n? = 0 (mod d). But if d 
divides either m or n, it must divide both, which it cannot do, 
since (m,n) = 1. Hence 2 = 0 (mod d), and d = 1, or 2. 
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First assume d = 1. Then 


zt = k(m? — n?) 


y = 2kmn 
z = k(m? + n?) 
and for primitive solutions 
r= m* — n? 
(9) y = 2mn 


z2= m+n? 


In ($), m and n are relatively prime and have opposite parity. 
Conversely, when m and n satisfy these conditions, (9) gives 
primitive solutions. 

We now assume d = 2, and have 


k 
x = 5 (m* — n’) 
y = kmn 

k 
z= 5 (m* + n*) 


Then for primitive solutions 

t= Him? — n) 
(10) y= mn 

2 = Hm? + n2) 


In (10) it is necessary that m and n have the same parity, and hence 
they are both odd, since (m, n) = 1. 
If we now put m = m’ + n’ and n = m’ — n’ in (10), we get 


xz = 2m'n’ 
y=m*—n 
z2=m?+n? 


this is (9) with z and y interchanged. Hence all primitive solutions 
of (5) may be obtained from (9). 
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EXERCISES II 


1. Determine all sets of Pythagorean integers which consist of consecutive 
terms of an arithmetic progression. 

2. Prove that the legs and hypotenuse of all integral right triangles in 
which the hypotenuse differs from one leg by unity are given by 2n + 1, 
2n? + 2n, 2n? + 2n + 1, n being a positive integer. 

3. Prove that the legs and hypotenuse of all integral right triangles in 
which the hypotenuse differs from one leg by 2, and the three sides are rela- 
tively prime, are given by 2n, n? — 1, n? + 1, n being a positive integer. 

4. Prove that no set of Pythagorean integers exists in which one integer 
is the mean proportional between the other two. 

5. Prove that there exists no isosceles right triangle whose three sides are 
integers. 

6. Show that the product of the three integers of a Pythagorean set is 
divisible by 60. 

Find formulas for primitive solutions in positive integers of: 

Tor +y? = 2. 8. x? — y? = 1624. 

9. Find a non-primitive solution of the equation of Exercise 7 such that 
the values of z and y cannot be obtained from those of a primitive solution 
by multiplying by a proportionality factor. 

10. Do the same for the equation of Exercise 8. 


47. The equation Ax? + y? = z*. We now develop formulas 
for x, y, and z which satisfy the equation 


(11) Arv+y=2 


in which A is a positive integer with no square factor. The solution 
is first assumed to be primitive. This is equivalent to requiring 
that no two of the numbers z, y, and z shall have a common factor. 
For, obviously, if z and one of the other variables have a common 
factor greater than unity, then the third variable must contain 
that factor. Alsoif (y,z) = d > 1, then Az? = 2? — y’is divisible 
by d?, and since A contains no square factor, d divides z. 
Assuming that we have a primitive solution x, y, 2 we write 


Av =2—y=@+y)@-y) 


Since (y, z) = 1, the g.c.d. of z+ y and z — y is either 2 or 1, 
according as z and y are both odd, or one is odd and the other even. 

First we assume both z and y to be odd and put z+ y = 2u, 
z— y = 2v, where (u, v) = 1. Then Az? = 4uv. Since A con- 
tains no square factor, x is even, and we write z = 2a. Conse- 
quently Az? = 4Aa® = 4uv, and Aa? = uv. Let m? and n? be 
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the largest squares in u and », respectively. Then u = mr, 


v = n*s, where (m, n) = (7, s) = (7, n) = (s, m) = 1. Then 


Aa*® = m*r-n’s, and A = rs, a= mn. Hence, since y = u — v 
and z = u + », we have 


(12) z=2mn, y = rm — sn?, z = rm? + sn? 

Thus any primitive solution of (11) in which both y and z are odd 
can be expressed in terms of 7, s, m, and n, where A = rs, and m 
and n are any integers subject to the above conditions, and the 
added requirement that, if A is odd, m and n have unequal parity. 

Conversely, any integers 7, s, m, and n satisfying the given con- 
ditions give only primitive solutions of thistype. For, if (y, z) > 1, 
then (u, v) > 1 and some of the given conditions would be con- 
tradicted. 

We now assume y and z to have unequal parity. As a con- 
sequence of this and one of the original assumptions, z + y and 
z— y are relatively prime. Then, since but one of the terms 
y” and z? is even, Ax”, and consequently A and z, are odd. Put 
zt+y=uandz—y=v. Then wu and v are odd, (u, v) = 1, 
and Ax? = uv. Let m* and n? be the greatest squares in u and 
v, respectively. We then have Az? = uv = rm?sn?, in which 
A =rs, x = mn, m and n are both odd, and (m, n) = (r, s) = 
(m, s) = (n,r) = 1. Then 


(13) x2=mn, y = $(rm? — sn’), z= 3(rm? + sn?) 


Thus a primitive solution of (11) in which y and z have unlike 
parity is given by (13) with the accompanying conditions for m, 
n, r, and s. And, conversely, (13) with these conditions yields 
only primitive solutions of this type. 

The above discussion has been on the basis of whether y and z 
have the same or unlike parity. However, for the purpose of 
solving such equations, our results should be stated from the stand- 
point of whether A is even or odd. Thus summarized these 
results are: 


I. If in the equation Ax? + y? = 2”, A 7s even and contains no 
square factor, all primitive solutions and no others are given by (12). 

II. If in the equation Ax? + y* = z?, A is odd and contains no 
square factor, all primitive solutions and no others are found by using 
both (12) and (13). 
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Obviously all non-primitive solutions are obtained by multiply- 
ing the primitive solutions by a factor k, which can take any 
positive integral value. 

To illustrate we give a few primitive solutions (all listed as 
positive) of: 

(a) 6x? + y? = 2*. Here A is even and the primitive solutions 
are obtained from (12), ie., 


z= 2mn, y = rm? — sn*, z= rm? + sn? 
where (m,n) = (r,n) = (s,m) = 1, r-s=6 

r s m n x y 2 

6 1 1 1 2 5 7 

6 1 4 11 88 25 217 

2 3 1 3 6 25 29 

2 3 5 1 10 47 53 


(b) 527 + y? = 2*. Since A is odd, primitive solutions are ob- 
tained from both (12) and (13). In using (12) the additional 
condition that m and n have different parity is imposed, and we get 


r s m n x y z 

4) 1 1 2 4 1 9 

4) 1 4 3 24 71 89 

1 5 4 3 24 29 61 

1 5) 1 2 4 19 21 
From (13), ie, 2 = mn, y = 4(rm? — sn”), z = $(rm? + sn?*) 
with m and n both odd, and (m, n) = (A, n) = 1, we get 

r 8 m n x y z 

4) 1 1 1 1 2 3 

5) 1 5) 3 15 58 67 

1 5) 1 1 1 2 3 

1 5) 5) 3 15 10 30 


EXERCISES III 


1. Find four solutions of 10x? + y? = 2’. 

2. Find six solutions (three each with (12) and (13)) of 7x? + y? = 2z?. 

3. Find formulas for z, y, and z which solve the equation 2? — y? = 2°. 
4. Find two sets of values of x, y, and z which are solutions for the equa- 


tion in Exercise 3. 


48. The equation ax” + bxy + cy” = ez”. We now develop 
formulas for the solution in integers of the equation 


(14) ax? + bry + cy” = ez? 


THE EQUATION az? + bry + cy? = ez? 99 


in which a, b, c, and e are integers, e ~ 0, and d = b* — 4ac is not 
the square of an integer. Such solutions are not always possible. 
However, if one exists and is known, infinitely many others may 
be found. 

Let tc =J9, y=k, z=I1 be one integral solution where 
(7, k, 1) = 1, and they are not all zero. In particular we require 
that z ¥ 0, for, if z = 0, since d is not a square, no rational values 


of x and y could satisfy (14). Then dividing through (14) by z we 
y? 


get an + b=. +e =e, and, putting — = u and = = v, we 
have 
(15) au” + buv + cv? = e 


Now a rational solution of (15) may be formed from any 
integral solution of (14). Conversely an integral solution of (14) 


may be obtained from any rational solution of (15). Forletu = 


y= i be a rational solution of (15), a, 8, y, and 6 being integers. 
a? b 
Then = y+ ae +7 me or a(a6)?-+b(as) (By) +e(8y)?=e(86)? and 


the integers a6, ee and 66 form a solution of (14). However, even 
if ; and are in their lowest terms, it 1s possible that 8 and 6 may 


have a common divisor >1, and hence this solution of (14) would 
not be primitive. Therefore there does not exist a one-to-one 
correspondence between the primitive solutions of (14) and the 
rational solutions in their lowest terms of (15), analogous to such 
a one-to-one correspondence for equations (5) and (6). 
Since e ¥ 0, equation (15) represents a proper central conic, and 
(: ; 4 are the coordinates of a rational point on it. The rational 
solutions of (15), which are reduced to their lowest terms, are the 
coordinates of the rational points of the conic. In finding the 
rational solutions of (15) we follow the general method used in 
solving (6). The equation of a line through the point (? ; 4 
m , 
with thevariableslope — , where m and n are integers not both zero, 
n 
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i 
is n(o—*) =m(u—2), When m ~ 0 and n # 0, this may 


— g/l —k/l k 
be written Hail 2a If m = 0, then » — ~ = 0, and 


similarly ifn = 0,u — ; = 0. Equating these ratios to w we write 
] k 
(16) w= nw +s, v= mw +7 


the equations of the line in terms of the parameter w. 
By putting the values of u and v from (16) into (15) we get a 
quadratic equation in w, 


(an? + bmn + cm?)w* + (2anj + bjm + bkn + 2cmk) : 
1 
+ 2 (aj? + bjk + ck? — el?) =0 


the constant term of which equals zero. The solution w = 0 


corresponds to the assumed solution of (15) u = ; ,v= Then 


__ 2anj + bjm + bkn + 2cmk 
i. l(an? + bmn + cm?) 


is the second solution. Using this in (16) we get 


x  cym* — 2ckmn — (aj + bk)n? 
“Lz - = COCO 
a7) z l(an? + bmn + cm?) 
pan — (bj + ck)m? — 2ajmn + akn? 


Z l(an* + bmn + cm?) 


If the two points of intersection of the line and the conic are 
rational, then the slope of the line is rational and may be expressed 


by = where m and n are integers. Then, if 21, y:, 2; is any 


integral solution of (14), and u;, 1 is the rational solution of (15) 
obtained from it, there exist integers m and n which when sub- 
stituted in (17) give u; and v1. Conversely, it appears from (17) 
that, if m and n are integers, wu and »v are rational, and from them 
integral solutions of (14) may be obtained. Now we introduce a 
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rational proportionality factor p, and write 
xz = plejm? — 2ckmn — (aj + bk)n?] = pr 
(18) y = p[—(bj + ck)m? — 2ajmn + akn?] = ps 
z = pl(cm? + bmn + an”) = pt 


Then, for any integral values of m and n and a value of p such that 
its denominator divides each of r, s, and ¢t, (18) gives integral 
values of xz, y, and z which satisfy (14). And conversely any 
integral solution of (14) may be obtained from (18) by a suitable 
choice of integral values of m and n, and a rational p. 

However, it is not true that by making all possible substitutions 
of m, n, and p we secure each possible integral solution of (14) once 
and only once. For example, if (m, n) = g, then g? divides 
x, y, and z, playing the part of a proportionality factor. Moreover, 
if we assume (m, n) = 1, it is still possible that 7, s, and t have a 
common factor. 

In Article 30 of his Introduction to the Theory of Numbers, 
L. E. Dickson sets up a rather complicated set of formulas and 
conditions, which, when taken with (18), solve equations (14) 
completely. These define the denominators which should be used 
for non-integral values of p, and give a method of determining the 
values of m and n to use with each. This is analogous to our 
discussion above of the value of d in arriving at equations (9) 
and (10). 

By the following example we illustrate the necessity of non- 
integral values of p. Given that one solution of 327—zry+y? = 32 
is 1, 1, 1, find others. Formulas (18) become 


xz = p(m* — 2mn — 2n?) 
y = p(—6mn + 3n’) 


z= p(m? — mn + 3n?) 


m n p Mv y 2 U v 
1 1 1 -3 -8 3 -1 -1 
I 1 + -1 -1 1 -1 -1 
—2 1 1 6 15 9 2 4 
—2 1 1 2 5 3 z § 
—5 1 1 33 33 33 1 1 
—5 1 4 11 11 11 1 1 
—5 1 vr 3 3 3 1 1 
—5 1 s3 1 1 1 1 1 
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From the solving of (15) it follows that there is a one-to-one 
correspondence between sets of values of w and v, and values of 


a , all to be in their lowest terms when non-integral. Hence 
n 


m=—2,n=1 (or m = 2, n =— 1) are the only values of m 
and n which can give u = %, v = 3, and consequently there exist 
no values of m and n from which we can obtain x = 2, y = 5, 
z = 3 with an integral value of p. 


EXERCISES IV 


Find three solutions of: 
1. 22? — ry + y” = 2’, one solution being 1,2,2. 
2. «2? — 5ey + 18y? = 32”, one solution being 2,1,2. 


49. The equation x” + y” = 2”. The famous “ Fermat’s last 
theorem ”’ states that the equation 


(19) xz” + yy” = 2” 


cannot be solved in non-zero integers for n an integer and >2. 
No proof was left with the statement of the theorem. During the 
three hundred years since its enunciation attempts to prove the 
theorem have led to extensive and important developments in 
the theory of numbers. But all attempts have failed to produce a 
complete proof. Kummer succeeded in proving it for large classes 
of numbers. It is known to be true, for example, for all values of 
n < 307, from which it follows that it is true for any value of n 
having a factor which is less than 307. The significance of the 
theorem is emphasized by interpreting it in geometrical terms. 


x ; 
In order to do this we put ee and 2 = v, getting 
z 


(20) u™+ou=1 


The solving of (19) in integers is equivalent to solving (20) in 
rational numbers. For n = 3 and n = 4, (20) represents, respec- 
tively, the open and closed curves shown. 

Interpreted geometrically the theorem means that the only 
rational points on the cubic curve are (0, 1) and (1, 0), and the 
only ones on the quartic are (1, 0), (0, 1), (—1, 0), and (0, —1). 
Higher odd and even values of n give curves similar in character 
respectively to these for n = 3 and n= 4. They all have the 
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remarkable property (within the limits of the truth of the theorem) 
that their only rational points are their intersections with the 
coordinate axes. 


Vv 


(0,1) 


50. Equations having no integral solutions. We will now 
discuss certain equations which have no solutions in positive in- 
tegers. First we show that the equation 


(21) ga+y=2 


cannot be solved in integers different from zero. 

The method of proof is to assume that solutions exist and show 
that this leads to a contradiction. Under this assumption let 
X21, Yi, 2; be a solution having the least numerical value of z, and 
assume z > 0. 

Note first that (71, y;) = 1. For if (a1, y;) = d > 1, d* would 


ain 2 x, \* yi\r z,\" 
vide 2] and 7" + a) Ng: Thus we would have a 


solution of (21) in which z = o <2z,. But 2; is the least possible 


value of z >0 in any solution. Hence (7, y;) = 1, and con- 
sequently they are not both even. Also x; and y; cannot both be 
odd, for then x} + y{ = 2 (mod 4) while 2? = 0 (mod 4). 

We then assume x; aseven and y; odd. Writing the equation in 
Pythagorean form (xi)? + (y%)? = 27, we can put 2; = 2mn, 


yi = m? — n?, 2, = m? + n?, where (m, n) = 1 and one of them 
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is even. If m were even, we would have y* = m? — nr? =— 
(mod 4), which is impossible. Hence put n = 2q, and get x” = 4mq 


2 
or (2) = mg. Since (m, q) = 1, each is a square. Put m =r 


and q = s*, where (r, s) = 1, r is odd and >0. Then from 
n? + y* = m? we get (2s”)? + y* = (r*)”. From the solution of 
this write 2s? = 2hk, and r? = h? + k?, where (h, k) = 1. Then 
hand karesquares. Puth = a*,k = b?, and we get r? = a* + 0*. 
But this shows a, b, r to be a solution of (21) in which O0<rsm<a2, 
whereas 2; was assumed to be the least positive value of z in any 
solution. Hence (21) has no integral solution. 

We note that this proves the impossibility in non-zero integers 
of x” + y” = 2”, where n = 0 (mod 4). 


EXERCISES V 


Show that the following equations are impossible in integers different from 
zero: 
~ 2+ 4yt = 27. 
at — yt = 27. Suggestion: (xt + y')? = 24 + 4(zy)4. 
xt — yt = 22’. 
x’ + 2Qy* = 27. Suggestion: Start from (12) with A = 2. 
at — 4y* = +27. 
. 8x4 — yt = 427. 
. c+ y* = 22? (other than 2? = y? = +2). 
. Prove that the area of an integral right triangle is never equal to 
twice a square number. 

9. Prove that the area of an integral right triangle is never equal to a 

square number. 

10. Prove that the system 


e+ya2,r+2=? 


has no solution in integers all different from zero. 


OM oP wp 


179 
181 
191 
193 
197 


199 
211 
223 
227 
229 


233 
239 
241 
251 
257 


263 
269 
271 
277 
281 


283 
293 
307 
311 
313 


317 
331 
337 
347 
349 


353 
359 
367 
373 
379 


383 
389 
397 
401 
409 


419 
421 
431 
433 
439 


443 
449 
457 
461 
463 


467 
479 
487 
491 
499 


503 
509 
521 
523 
541 


547 
557 
563 
569 
571 


577 
587 
593 
599 
601 


607 
613 
617 
619 
631 


641 
643 
647 
653 
659 


661 
673 
677 
683 
691 


701 
709 
719 
727 
733 


739 
743 
751 
757 
761 


769 
773 
787 
797 
809 


811 
821 
823 
827 
829 


839 
853 
857 
859 
863 


877 
881 
883 
887 
907 


911 
919 
929 
937 
941 


TABLE OF PRIMES 


947 
953 
967 
971 
977 


983 
991 
997 
1009 
013 


019 
021 


1229 
231 
237 
249 
259 


277 
279 
283 
289 
291 


297 
301 
303 
307 
319 


321 
327 
361 
367 
373 


381 
399 
409 
423 
427 


429 
433 
439 
447 
451 


453 
459 
471 
481 
483 


487 
489 
493 
499 
511 


105 


1523 
531 
543 
549 
553 


559 
567 
571 
579 
583 


597 
601 
607 
609 
613 


619 
621 
627 
637 
657 


663 
667 
669 
693 
697 


699 
709 
721 
723 
733 


741 
747 
753 
759 
777 


783 
787 
789 
801 
811 


1823 
831 
847 
861 
867 


871 
873 
877 
879 
889 


901 
907 
913 
931 
933 


949 
951 
973 
979 
987 


993 
997 
999 
2003 
011 


017 
027 
029 
039 
053 


063 
069 
081 
083 
087 


089 
099 
111 
113 
129 


2437 
441 
447 
459 
467 


473 
477 
503 
521 
531 


539 
543 
549 
551 
557 


579 
591 
593 
609 
617 


621 
633 
647 
657 
659 


663 
671 
677 
683 
687 


689 
693 
699 
707 
711 


713 
719 
729 
731 
74) 


This page intentionally left blank 


INDEX 


(Numbers refer to pages) 


Approximation theorems for s.c.f., 25-28 
Belonging to an exponent, 63 


Chinese remainder theorem, 55 
Complete residue system modulo m, 44 
Congruences, defined, 43 

Continued fractions, defined, 15 
Convergent of s.c.f., defined, 17 


Dickson, L. E., 10, 101 
Diophantine equations, simultaneous linear, 89-91 
ax + by=c, 5, 20 
x2 — Dy? = N, 36-40 
xe? + y? = 22, 92-95 
Ax? + y?2 = 22, 96-98 
ax? + bry + cy? = ez7, 98-102 
x+y" = 2", 102-103 
xtt yt = 22, 103 
Diophantus, 5 
Division modulo p, 58 


Euclidean algorithm, 2 

Euler’s criterion, 73 

Euler’s generalization of Fermat’s theorem, 47-48 
Euler’s ¢-function, 11 


Factor modulo p, 58 

Factor stencils, 88 

Factorial, 3 

Factoring by residues, 87-88 

Factorization modulo p, 58-59 

Fermat’s last theorem, 102 

Fermat’s theorem, 47, 49 
generalization of, 47-48 


Gauss’s lemma, 77 

Gauss’s notation for congruence, 43 

Greatest common divisor, 2 
modulo p, 59 


Identical congruence, 58 

Indicator of a number, 11 

Indices, 69-70 

Irrational numbers, expansion of, 21-25 


107 


108 INDEX 


Jacobi symbol, 82-85 
Kummer, 102 


Least common multiple, 9 
Legendre symbol for quadratic character, 75, 8 
Lehmer, D. N., factor stencils, 88 
table of primes, 88 
Linear congruences, 50-53 


Number class modulo m, 44 
Number of divisors of an integer, 7-8 
Numbers having primitive roots, 66-68 


Parity, defined, 1 
Perfect numbers, 10 
Periodic simple continued fractions, 23, 24, 28-3¢ 
Power residues, 62-65 
Primes, defined, 1 
infinitude of, 9 
table of, 105 
Primitive roots, 65-68 
Pythagoras, 92 
Pythagorean numbers, 92, 93, 96 


Quadratic character, 75-76 
Quadratic congruence, 86-87 
Quadratic reciprocity law, 76-81 
Quadratic surd expansion, 23, 29-36 


Rational numbers, expansion of, 15-19 
Reduced residue system modulo m, 46 
Relatively prime integers, 3 

Residues of nth order, 73-74 

Root of a congruence, 50 


Simple continued fractions, 15-36 
approximation theorems for, 25-28 
definition of, 15 
infinite s.c.f. converges, 22 
periodic, 28-36 

Simultaneous congruences, 54-56 

Sum of divisors of a number, 7-8 

Symmetric continued fraction, 21 


Totient, 11 
Unique factorization theorem, 6 


Wilson's theorem, 49, 61, 66 
converse, 49 


